Vulnerability · Published Aug 10, 2022 · Assigned by cisco
CVE-2022-20841Cisco Small Business RV Series Routers Vulnerabilities
Critical 9.0
In plain English
A critical-severity buffer overflow in Cisco Small Business RV Series Router Firmware from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.4% (higher than 89% of all known vulnerabilities).
Severity (CVSS 3.1)9.0Critical
Exploit odds (30 days)3.4%top 11.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Small Business RV Series Router Firmware | n/a |
Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
References
- 20220803 Cisco Small Business RV Series Routers Vulnerabilities vendor-advisory, x_refsource_CISCO