What’s Vulnerable › Vulnerabilities
CVE-2022-20827: Cisco Small Business RV Series Routers Vulnerabilities
- Severity: critical (CVSS 10.0 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-08-10 · updated 2026-06-17
- Weakness: CWE-120
Description
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Affected products
- Cisco Rv160 Firmware: before 1.0.01.05 — fixed in 1.0.01.05
- Cisco Rv160W Firmware: before 1.0.01.05 — fixed in 1.0.01.05
- Cisco Rv260 Firmware: before 1.0.01.05 — fixed in 1.0.01.05
- Cisco Rv260P Firmware: before 1.0.01.05 — fixed in 1.0.01.05
- Cisco Rv260W Firmware: before 1.0.01.05 — fixed in 1.0.01.05
- Cisco Rv340 Firmware: before 1.0.03.26 — fixed in 1.0.03.26
- Cisco Rv340W Firmware: before 1.0.03.26 — fixed in 1.0.03.26
- Cisco Rv345 Firmware: before 1.0.03.26 — fixed in 1.0.03.26
- Cisco Rv345P Firmware: before 1.0.03.26 — fixed in 1.0.03.26
How to fix
Upgrade to a fixed version: Cisco Rv160 Firmware 1.0.01.05; Cisco Rv160W Firmware 1.0.01.05; Cisco Rv260 Firmware 1.0.01.05; Cisco Rv260P Firmware 1.0.01.05; Cisco Rv260W Firmware 1.0.01.05; Cisco Rv340 Firmware 1.0.03.26; Cisco Rv340W Firmware 1.0.03.26; Cisco Rv345 Firmware 1.0.03.26; Cisco Rv345P Firmware 1.0.03.26. Check the vendor advisory for mitigations.
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-mult-vuln-CbVp4SUR
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-mult-vuln-CbVp4SUR
Get alerted when CVE-2022-20827 or the next vulnerability affects your stack