Live › vulnerability › CVE-2022-20701
Go to dashboardCVE-2022-20701 is in Cisco's Feb 2022 multi-CVE advisory for RV Series routers. Per Cisco it affects only RV340, RV340W, RV345 and RV345P, and lets an attacker gain root through the web-based management interface because of insufficient authorization. Cisco rates it Critical (CVSS 9.0, local vector). CISA KEV lists it as exploited and labels it a stack-based buffer overflow (CWE-121). Cisco says no workarounds exist; update the firmware.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | vendor | – | – |
| Cisco RV340/RV340W/RV345/RV345P routers firmware | vendor | <= 1.0.03.24 | 1.0.03.26 |
1.0.03.24 or earlier is vulnerable1.0.03.26 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
This page as .md · .json · in your agent: get_signal("CVE-2022-20701")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.