The vulnerability of the web interface of Cisco Small Business routers such as RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P allows attackers to gain partial administrative privileges and perform unauthorized actions.

🗓️ 21 Apr 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Cisco Small Business router web interface flaw lets remote attackers gain partial admin rights.

Reporter	Title	Published	Views	Family All 23
0day.today	Cisco RV Series Authentication Bypass / Command Injection Exploit	14 Feb 202300:00	–	zdt
ATTACKERKB	CVE-2022-20705	3 Feb 202200:00	–	attackerkb
Circl	CVE-2022-20705	14 Feb 202300:13	–	circl
Cisco	Cisco Small Business RV Series Routers Vulnerabilities	2 Feb 202216:00	–	cisco
Tenable Nessus	Cisco Small Business RV Series Routers Multiple Vulnerabilities (cisco-sa-smb-mult-vuln-KA9PK6D)	3 Feb 202200:00	–	nessus
CNNVD	Cisco Small Business 缓冲区错误漏洞	3 Feb 202200:00	–	cnnvd
CVE	CVE-2022-20705	10 Feb 202217:06	–	cve
Cvelist	CVE-2022-20705 Cisco Small Business RV Series Routers Vulnerabilities	10 Feb 202217:06	–	cvelist
Metasploit	Cisco RV Series Authentication Bypass and Command Injection	14 Feb 202319:49	–	metasploit
NCSC	Vulnerabilities fixed in Cisco Small Business RV routers	3 Feb 202200:00	–	ncsc

Vulners

Node

cisco_systems cisco_rv340wRange<1.0.03.26

OR

cisco_systems cisco_small_business_rv340Range<1.0.03.26

OR

cisco_systems cisco_rv345Range<1.0.03.26

OR

cisco_systems cisco_rv345pRange<1.0.03.26

OR

cisco_systems cisco_small_business_rv160Range<1.0.01.07

OR

cisco_systems cisco_small_business_rv160wRange<1.0.01.07

OR

cisco_systems cisco_small_business_rv260Range<1.0.01.07

OR

cisco_systems cisco_small_business_rv260pRange<1.0.01.07

OR

cisco_systems cisco_small_business_rv260wRange<1.0.01.07

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022020301
web	www.web.nvd.nist.gov/view/vuln/detail

21 Apr 2022 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 35.3

EPSS0.80208

Cisco routers Small Business routers web interface authentication flaws remote attackers partial admin rights