CRITICAL🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2022-20700

CVSS 10.0v3.1pub. 2022-02-10upd. 2025-10-28

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Cisco Rv160
HW
Cisco
wszystkie wersje
Cisco Rv160 Firmware
OS
Cisco
≤ 1.0.01.05
Cisco Rv160w
HW
Cisco
wszystkie wersje
Cisco Rv160w Firmware
OS
Cisco
≤ 1.0.01.05
Cisco Rv260
HW
Cisco
wszystkie wersje
Cisco Rv260 Firmware
OS
Cisco
≤ 1.0.01.05
Cisco Rv260p
HW
Cisco
wszystkie wersje
Cisco Rv260p Firmware
OS
Cisco
≤ 1.0.01.05
Cisco Rv260w
HW
Cisco
wszystkie wersje
Cisco Rv260w Firmware
OS
Cisco
≤ 1.0.01.05
Cisco Rv340
HW
Cisco
wszystkie wersje
Cisco Rv340 Firmware
OS
Cisco
≤ 1.0.03.24
Cisco Rv340w
HW
Cisco
wszystkie wersje
Cisco Rv340w Firmware
OS
Cisco
≤ 1.0.03.24
Cisco Rv345
HW
Cisco
wszystkie wersje
Cisco Rv345 Firmware
OS
Cisco
≤ 1.0.03.24
Cisco Rv345p
HW
Cisco
wszystkie wersje
Cisco Rv345p Firmware
OS
Cisco
≤ 1.0.03.24

CISA KEV — detailsi

Vendori: Cisco ↗
Producti: Small Business RV160, RV260, RV340, and RV345 Series Routers
Added to KEVi: March 3, 2022
Remediation deadline (US Federal)i: March 17, 2022(overdue)

🔧Advisory Cisco↗🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

🔴