CRITICAL · 9.0

CVE-2022-20841

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (D...

Vulnerability Description

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS Score

9.0

CRITICAL

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CiscoRv160 Firmware< 1.0.01.05
CiscoRv160-
CiscoRv160W Firmware< 1.0.01.05
CiscoRv160W-
CiscoRv260 Firmware< 1.0.01.05
CiscoRv260-
CiscoRv260P Firmware< 1.0.01.05
CiscoRv260P-
CiscoRv260W Firmware< 1.0.01.05
CiscoRv260W-
CiscoRv340 Firmware< 1.0.03.26
CiscoRv340-
CiscoRv340W Firmware< 1.0.03.26
CiscoRv340W-
CiscoRv345 Firmware< 1.0.03.26
CiscoRv345-
CiscoRv345P Firmware< 1.0.03.26
CiscoRv345P-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2022-20841?

CVE-2022-20841 is a vulnerability with a CVSS score of 9.0 (CRITICAL). Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (D...

How severe is CVE-2022-20841?

CVE-2022-20841 has been rated CRITICAL with a CVSS base score of 9.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2022-20841?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Rv160 Firmware, Cisco Rv160, Cisco Rv160W Firmware, Cisco Rv160W, Cisco Rv260 Firmware.