CVE-2022-20703KEV · OVERDUECWE-121

Cisco Small Business RV Series Routers Vulnerabilities

Critical · published February 10, 2022

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 10.0. It is confirmed in active exploitation. It sits in the 95.3th percentile for exploit probability.

1682
days past CISA
deadline
CVSS v3.1
10.0
EPSS
9%
Percentile
95.3
In the wild
Confirmed
What it is

🚨 A cocktail of vulnerabilities lurks in Cisco's RV Series routers, allowing attackers to execute arbitrary code and even bypass authentication—yikes! 🔥 Think of these routers as digital gatekeepers, but they’ve misplaced their keys and left the door wide open. It’s like a hotel where anyone can waltz in, grab the master key, and access every room without a hitch! The consequences are absolutely devastating—attackers could take full control, execute harmful commands, run unauthorized software, or even launch a denial of service attack, bringing your network to its knees. If your router is vulnerable, it’s a goldmine for bad actors!

Put simply

Think of these routers as digital gatekeepers, but they’ve misplaced their keys and left the door wide open. It’s like a hotel where anyone can waltz in, grab the master key, and access every room without a hitch! Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 routers allow attackers to bypass authentication and execute arbitrary commands, effectively compromising the router's security. A CVSS score of 10 indicates that this is a critical risk needing immediate attention.

What to do

The consequences are absolutely devastating—attackers could take full control, execute harmful commands, run unauthorized software, or even launch a denial of service attack, bringing your network to its knees. If your router is vulnerable, it’s a goldmine for bad actors! Patch your routers to the latest firmware version available from Cisco immediately. Implement strong access controls, audit your device settings, and consider using additional security layers to mitigate risks. You've got this! Act fast, patch those devices, and you'll be reinforcing your defenses like a true security hero! 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.09203 · 95.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2022-02-10T17:06Z
KEV added
2022-03-03 · due 2022-03-17
EPSS history
Timeline
  • 03 MAR 00:00Z
    Added to CISA KEV — remediate by Mar 17
    kev
  • 10 FEB 17:06Z
    Cisco Small Business RV Series Routers Vulnerabilities
    cvelistv5