CVE-2022-20706
Assigner: cisco
Published: 2022-02-03T00:00:00
State: PUBLISHED
affected: product: Cisco Small Business RV Series Router Firmware 
vendor: Cisco
versions: status: affected
version: n/a
datePublic: 2022-02-03T00:00:00
descriptions: value: Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
exploits: value: The Cisco PSIRT is aware that proof-of-concept exploit code is available for several of the vulnerabilities that are described in this advisory. 
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-121
description: CWE-121
type: CWE
source: advisory: cisco-sa-smb-mult-vuln-KA9PK6D
defect: CSCvz88279
CSCvz94704
CSCwa12732
CSCwa12748
CSCwa12836
CSCwa13115
CSCwa13119
CSCwa13205
CSCwa13682
CSCwa13836
CSCwa13882
CSCwa13888
CSCwa13900
CSCwa14007
CSCwa14008
CSCwa14564
CSCwa14565
CSCwa14601
CSCwa14602
CSCwa15167
CSCwa15168
CSCwa18769
CSCwa18770
CSCwa32432
CSCwa36774
CSCwa54598
discovery: INTERNAL
title: Cisco Small Business RV Series Routers Vulnerabilities