CVE-2022-20701KEV · OVERDUECWE-121

Cisco Small Business RV Series Routers Vulnerabilities

Critical · published February 10, 2022

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 10.0. It is confirmed in active exploitation. It sits in the 95.5th percentile for exploit probability.

1681
days past CISA
deadline
CVSS v3.1
10.0
EPSS
10%
Percentile
95.5
In the wild
Confirmed
What it is

🚨 Multiple vulnerabilities in Cisco routers are a hacker's dream, enabling remote code execution, privilege escalation, and even authentication bypass! 🔥 Think of these routers as a bank vault with several faulty locks. One minor tweak can let a thief waltz in and take whatever they want—unrestricted access to sensitive information! If exploited, an attacker could execute arbitrary commands, install unsigned software, or even cause a denial of service, leading to complete chaos and disruption for your network. It's absolutely devastating to think that such vulnerabilities are lurking in devices that should keep your data safe.

Put simply

Think of these routers as a bank vault with several faulty locks. One minor tweak can let a thief waltz in and take whatever they want—unrestricted access to sensitive information! CVE-2022-20701 affects Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers, allowing attackers to execute commands, elevate privileges, and bypass security protections due to multiple vulnerabilities within the firmware.

What to do

If exploited, an attacker could execute arbitrary commands, install unsigned software, or even cause a denial of service, leading to complete chaos and disruption for your network. It's absolutely devastating to think that such vulnerabilities are lurking in devices that should keep your data safe. To protect your network, immediately update your routers to the latest firmware version released by Cisco. Additionally, review your current security settings and ensure that unauthorized access is strictly restricted. You've got this! Act quickly, and you'll reinforce your defenses like a security hero! 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.09747 · 95.5th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2022-02-10T17:06Z
KEV added
2022-03-03 · due 2022-03-17
EPSS history
Timeline
  • 03 MAR 00:00Z
    Added to CISA KEV — remediate by Mar 17
    kev
  • 10 FEB 17:06Z
    Cisco Small Business RV Series Routers Vulnerabilities
    cvelistv5