---
id: "CVE-2022-20701"
kind: "vulnerability"
aliases: ["CVE-2022-20701"]
title: "Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability"
severity: "critical"
cvss: 10.0
epss: 0.09747
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "Cisco RV340/RV340W/RV345/RV345P routers firmware", "fixed": ["1.0.03.26"], "affected": "<= 1.0.03.24", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["cisco", "exploited", "infrastructure", "rv160", "rv260", "rv340", "rv345", "small-business-routers", "web-management"]
not_affected_if: ["firmware-1.0.03.26-or-later", "rv160-rv260-only", "unknown"]
published_at: "2022-02-10T18:15:09+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-20701", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-20701", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-23T21:25:59+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-20701", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

CVE-2022-20701 is in Cisco's Feb 2022 multi-CVE advisory for RV Series routers. Per Cisco it affects only RV340, RV340W, RV345 and RV345P, and lets an attacker gain root through the web-based management interface because of insufficient authorization. Cisco rates it Critical (CVSS 9.0, local vector). CISA KEV lists it as exploited and labels it a stack-based buffer overflow (CWE-121). Cisco says no workarounds exist; update the firmware.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected ? fixed ?
- vendor:Cisco RV340/RV340W/RV345/RV345P routers firmware affected <= 1.0.03.24 fixed 1.0.03.26

## How to check

In the router web UI (Firmware/System Summary), check firmware version on RV340/RV345 family; 1.0.03.24 or earlier is vulnerable. RV160/RV260 are not affected by this CVE per Cisco.

## Fix

Upgrade RV340/RV340W/RV345/RV345P firmware to 1.0.03.26 or later. No workaround. Restrict web management to trusted internal networks as general hardening (not a Cisco-stated mitigation).

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-20701
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2022-20701
- 2026-10-23T21:25:59+00:00 analyst — Read Cisco advisory cisco-sa-smb-mult-vuln-KA9PK6D (Feb 2022): 20701 affects only RV340/RV340W/RV345/RV345P; fixed 1.0.03.26. Advisory text calls it a web-management privilege escalation (CVSS 9.0, AV:L), while KEV/CWE-121 says stack buffer overflow; descriptions differ. Cisco confirms PoC exists for several of the advisory's CVEs, not tied to this one. No workaround. In-the-wild exploitation from CISA KEV only.
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2022-20701

## Documents

- [advisory] Cisco Small Business RV Series Routers Vulnerabilities (cisco-sa-smb-mult-vuln-KA9PK6D) https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-smb-mult-vuln-KA9PK6D.html
- [mentions] CISA KEV entry CVE-2022-20701 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?f=vendor_project%3A1043&f=vendor_project%3A1151&f=vendor_project%3A1174&f=vendor_project%3A1271&page=6
- [mentions] CERT-FR CERTFR-2022-AVI-107 https://cert.cyber.gouv.fr/avis/CERTFR-2022-AVI-107

## From the sources

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_