CVE-2022-20699
Published 2022-02-10 · Updated 2026-06-17 · Source psirt@cisco.com
Summary
CVE-2022-20699 is a critical-severity (CVSS 10.0) vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. CISA added it to the Known Exploited Vulnerabilities catalog on March 3, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by March 17, 2022. CISA does not currently list it as used in ransomware campaigns. Cisco has 102 vulnerabilities in the KEV catalog, 7 of them linked to ransomware.
All 102 known-exploited Cisco vulnerabilities →Description
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Cisco — Small Business RV160, RV260, RV340, and RV345 Series Routers
Name: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Date added: 2022-03-03 · Due: 2022-03-17
Required action: Apply updates per vendor instructions.
References
- http://packetstormsecurity.com/files/167113/Cisco-RV340-SSL-VPN-Unauthenticated-Remote-Code-Execution.html
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
- https://www.zerodayinitiative.com/advisories/ZDI-22-414/
- http://packetstormsecurity.com/files/167113/Cisco-RV340-SSL-VPN-Unauthenticated-Remote-Code-Execution.html
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
- https://www.zerodayinitiative.com/advisories/ZDI-22-414/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-20699