CVE-2022-20707CWE-121

Cisco Small Business RV Series Routers Vulnerabilities

Critical · published February 10, 2022

Patch now

High probability of exploitation

CVSS calls it critical at 10.0. It sits in the 99.5th percentile for exploit probability.

CVSS v3.1
10.0
EPSS
75%
Percentile
99.5
In the wild
Unconfirmed
What it is

🔥 Multiple vulnerabilities in Cisco's Small Business routers make it alarmingly easy for an attacker to fully seize control. We're talking about a free pass to execute arbitrary code, bypass authentication, and even launch denial of service attacks! ⚡ Think of these routers as a secure vault, but with a malfunctioning lock. The faulty mechanism allows a thief to not only pick the lock but also to enter, override the security system, and take whatever they want without any alarm sounding. An attacker could waltz right into your network and wreak havoc—executing malicious commands, running unsigned software, and completely disabling your services. This could lead to data breaches, significant downtime, and a massive loss of trust from your clients.

Put simply

Think of these routers as a secure vault, but with a malfunctioning lock. The faulty mechanism allows a thief to not only pick the lock but also to enter, override the security system, and take whatever they want without any alarm sounding. The vulnerabilities affect Cisco RV160, RV260, RV340, and RV345 routers, allowing attackers to exploit flaws to elevate privileges, execute arbitrary code, and bypass essential security features, posing a severe risk to network integrity.

What to do

An attacker could waltz right into your network and wreak havoc—executing malicious commands, running unsigned software, and completely disabling your services. This could lead to data breaches, significant downtime, and a massive loss of trust from your clients. To protect your network, update the affected devices immediately to the latest firmware version available from Cisco. Ensure to disable any unused services and implement strong authentication measures to bolster security. You've got this! Patch those routers and keep your network secure! 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.75322 · 99.5th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2022-02-10T17:06Z
EPSS history
Timeline
  • 10 FEB 17:06Z
    Cisco Small Business RV Series Routers Vulnerabilities
    cvelistv5