The vulnerability of the microprogramming software check function for Cisco Small Business routers such as RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P allows attackers to install and load malicious software or execute unsigned binary files on vulnerable devices.

🗓️ 21 Apr 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru

Cisco Small Business routers vulnerable to unsigned binaries due to weak image signature verification.

Reporter	Title	Published	Views	Family All 20
ATTACKERKB	CVE-2022-20703	3 Feb 202200:00	–	attackerkb
Circl	CVE-2022-20703	4 Feb 202211:26	–	circl
CISA KEV Catalog	Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability	3 Mar 202200:00	–	cisa_kev
Cisco	Cisco Small Business RV Series Routers Vulnerabilities	2 Feb 202216:00	–	cisco
Tenable Nessus	Cisco Small Business RV Series Routers Multiple Vulnerabilities (cisco-sa-smb-mult-vuln-KA9PK6D)	3 Feb 202200:00	–	nessus
CNNVD	Cisco Small Business 信任管理问题漏洞	3 Feb 202200:00	–	cnnvd
CVE	CVE-2022-20703	10 Feb 202217:06	–	cve
Cvelist	CVE-2022-20703 Cisco Small Business RV Series Routers Vulnerabilities	10 Feb 202217:06	–	cvelist
EUVD	EUVD-2022-25953	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco Small Business RV routers	3 Feb 202200:00	–	ncsc

Vulners

Node

cisco_systems cisco_rv340wRange<1.0.03.26

OR

cisco_systems cisco_small_business_rv340Range<1.0.03.26

OR

cisco_systems cisco_rv345Range<1.0.03.26

OR

cisco_systems cisco_rv345pRange<1.0.03.26

OR

cisco_systems cisco_small_business_rv160Range<1.0.01.07

OR

cisco_systems cisco_small_business_rv160wRange<1.0.01.07

OR

cisco_systems cisco_small_business_rv260Range<1.0.01.07

OR

cisco_systems cisco_small_business_rv260pRange<1.0.01.07

OR

cisco_systems cisco_small_business_rv260wRange<1.0.01.07

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022020302
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 39.3

EPSS0.02001

router models small business image verification signature verification unsigned binaries malicious software cryptographic signature