← Back

CVE-2022-20827

nvd nist
Published: Aug 10, 2022Modified: Nov 21, 2024

JSON object

Loading...
10.0
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 6.0
Source: NVD

Description

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected (9)

Cisco
9 products
Rv160 Firmware
Rv160w Firmware
Rv260 Firmware
Rv260p Firmware
Rv260w Firmware
Rv340 Firmware
Rv340w Firmware
Rv345 Firmware
Rv345p Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rv160 Firmware
Before 1.0.01.05
Running on/withPlatform Versions
Cisco
Rv160
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rv160w Firmware
Before 1.0.01.05
Running on/withPlatform Versions
Cisco
Rv160w
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rv260 Firmware
Before 1.0.01.05
Running on/withPlatform Versions
Cisco
Rv260
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rv260p Firmware
Before 1.0.01.05
Running on/withPlatform Versions
Cisco
Rv260p
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rv260w Firmware
Before 1.0.01.05
Running on/withPlatform Versions
Cisco
Rv260w
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rv340 Firmware
Before 1.0.03.26
Running on/withPlatform Versions
Cisco
Rv340
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rv340w Firmware
Before 1.0.03.26
Running on/withPlatform Versions
Cisco
Rv340w
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rv345 Firmware
Before 1.0.03.26
Running on/withPlatform Versions
Cisco
Rv345
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rv345p Firmware
Before 1.0.03.26
Running on/withPlatform Versions
Cisco
Rv345p
All versions

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (2)

Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.