CRITICAL🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2022-20701

CVSS 10.0v3.1pub. 2022-02-10upd. 2025-10-28

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Cisco Rv340
HW
Cisco
all versions
Cisco Rv340 Firmware
OS
Cisco
≤ 1.0.03.24
Cisco Rv340w
HW
Cisco
all versions
Cisco Rv340w Firmware
OS
Cisco
≤ 1.0.03.24
Cisco Rv345
HW
Cisco
all versions
Cisco Rv345 Firmware
OS
Cisco
≤ 1.0.03.24
Cisco Rv345p
HW
Cisco
all versions
Cisco Rv345p Firmware
OS
Cisco
≤ 1.0.03.24

CISA KEV — detailsi

Vendori: Cisco ↗
Producti: Small Business RV160, RV260, RV340, and RV345 Series Routers
Added to KEVi: March 3, 2022
Remediation deadline (US Federal)i: March 17, 2022(overdue)

🔧Advisory Cisco↗🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

🔴