CVE-2022-20699KEV · OVERDUECWE-121

Cisco Small Business RV Series Routers Vulnerabilities

Critical · published February 10, 2022

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 10.0. It is confirmed in active exploitation. It sits in the 99.4th percentile for exploit probability.

1681
days past CISA
deadline
CVSS v3.1
10.0
EPSS
72%
Percentile
99.4
In the wild
Confirmed
What it is

🚨 A single misconfiguration could let attackers unleash havoc on your Cisco routers! ⚡ Think of this like a security guard at a concert who forgot to check tickets — anyone can waltz in and take over the stage, wreaking chaos without a second thought. This vulnerability is absolutely devastating! An attacker could execute arbitrary code, gain elevated privileges, and even cause a denial of service, leaving your network vulnerable to total takeover. Imagine the chaos if they could fetch and run unsigned software at will!

Put simply

Think of this like a security guard at a concert who forgot to check tickets — anyone can waltz in and take over the stage, wreaking chaos without a second thought. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 routers allow attackers to bypass authentication, execute commands, and run malicious code due to inadequate checks.

What to do

This vulnerability is absolutely devastating! An attacker could execute arbitrary code, gain elevated privileges, and even cause a denial of service, leaving your network vulnerable to total takeover. Imagine the chaos if they could fetch and run unsigned software at will! Patch your devices immediately to the latest firmware version. Review your current configurations and ensure that authorization checks are robust and functioning as intended. Don't forget to monitor for any unusual activity that might indicate exploitation! You've got this! With swift action, you can safeguard your network and restore peace of mind. 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.72458 · 99.4th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2022-02-10T17:06Z
KEV added
2022-03-03 · due 2022-03-17
EPSS history
Timeline
  • 03 MAR 00:00Z
    Added to CISA KEV — remediate by Mar 17
    kev
  • 10 FEB 17:06Z
    Cisco Small Business RV Series Routers Vulnerabilities
    cvelistv5