peter bassill · operator
$ cve CVE-2022-20705 JSON

CVE-2022-20705

10.0
CRITICAL · CVSS 3.1 · EPSS 80% (pctl 100)

Patch early

EPSS 80% — above the 10% action threshold.

Description

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Scoring

CVSS10.0 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS80.03% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-121
On CISA KEVno
Public exploitnone known
Published2022-02-10
Last modified2026-06-17

Affected (18)

VendorProduct
ciscorv160
ciscorv160 firmware
ciscorv160w
ciscorv160w firmware
ciscorv260
ciscorv260 firmware
ciscorv260p
ciscorv260p firmware
ciscorv260w
ciscorv260w firmware
ciscorv340
ciscorv340 firmware
ciscorv340w
ciscorv340w firmware
ciscorv345
ciscorv345 firmware
ciscorv345p
ciscorv345p firmware

References

→ the Explorer  ·  watch your stack  ·  NVD