Threat Investigation
Request a demo

CVE-2022-20841

Critical

Description

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

SeverityCritical
CVSS9.0
Exploit probability—
ProductCisco Rv160 Firmware
PublishedAug 10, 2022
First seenAug 10, 2022
Weakness typeCWE-120CWE-120

How to fix

Update
  • cisco rv160_firmware1.0.01.05 or later
  • cisco rv160w_firmware1.0.01.05 or later
  • cisco rv260_firmware1.0.01.05 or later
  • cisco rv260p_firmware1.0.01.05 or later
  • cisco rv260w_firmware1.0.01.05 or later
  • cisco rv340_firmware1.0.03.26 or later
  • cisco rv340w_firmware1.0.03.26 or later
  • cisco rv345_firmware1.0.03.26 or later
  • cisco rv345p_firmware1.0.03.26 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
cisco rv160_firmwarev < 1.0.01.051.0.01.05
cisco rv160w_firmwarev < 1.0.01.051.0.01.05
cisco rv260_firmwarev < 1.0.01.051.0.01.05
cisco rv260p_firmwarev < 1.0.01.051.0.01.05
cisco rv260w_firmwarev < 1.0.01.051.0.01.05
cisco rv340_firmwarev < 1.0.03.261.0.03.26
cisco rv340w_firmwarev < 1.0.03.261.0.03.26
cisco rv345_firmwarev < 1.0.03.261.0.03.26
cisco rv345p_firmwarev < 1.0.03.261.0.03.26

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.