CVE-2022-20701 — Vulnetix

CVE-2022-20701 PUBLISHED KEV CVSS 10 CRITICAL

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

EPSS 6.08% · 90.9th percentile

Risk Scores

CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS Score

6.08%

90.9th percentile

Affected Products

Vendor	Product	Versions
cisco	rv345_firmware	0, 0, 0
cisco	rv340w_firmware	0, 0, 0
cisco	rv345p_firmware	0, 0, 0
Cisco	Cisco Small Business RV Series Router Firmware	n/a
cisco	rv340_firmware	0, 0, 0

Exploit Intelligence

CIRCL seen: CVE-2022-20701 (circl-sighting)
CIRCL seen: CVE-2022-20701 (circl-sighting)
CIRCL seen: CVE-2022-20701 (circl-sighting)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-20701 (circl)
20220203 Cisco Small Business RV Series Routers Vulnerabilities (circl)
https://www.zerodayinitiative.com/advisories/ZDI-22-412/ (circl)
kev.json (github-poc)
kev.json (github-poc)
kev.json (github-poc)
kev.json (github-poc)

…and 6 more exploits

Timeline

Feb 10, 2022 CVE Published
Feb 11, 2022 EPSS Score
Mar 3, 2022 CISA KEV Added
Apr 4, 2022 EPSS Score
May 27, 2022 EPSS Score
Sep 9, 2022 EPSS Score
Nov 1, 2022 EPSS Score
Feb 13, 2023 EPSS Score
Mar 7, 2023 EPSS Score
May 29, 2023 EPSS Score
Jun 14, 2023 PoC Published
Jul 20, 2023 EPSS Score

References

Open in Interactive Console →