CVE-2022-20708
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Published Feb 10, 2022 · updated Jun 16, 2026 · cisco rv340 firmware
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
Timeline
Detection, updates, and resolution for this record.
Feb 10, 2022 · Catalog
Detected
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details sect
Mar 3, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Mar 17, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details sect
Required action
Apply updates per vendor instructions.
CISA due date Mar 17, 2022
Affected
- cpe cisco/rv340 firmwareversion unspecified
- cpe cisco/rv340w firmwareversion unspecified
- cpe cisco/rv345 firmwareversion unspecified
- cpe cisco/rv345p firmwareversion unspecified
- vendor Cisco Small Business RV160, RV260, RV340, and RV345 Series Routersversion unspecified
Sources
- CISA KEVCVE-2022-20708
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
cisa.gov - CVE.orgCVE-2022-20708
Official CVE identifier
cve.org - FIRST EPSSCVE-2022-20708
30-day exploitation probability 14.9%
first.org - NIST NVDCVE-2022-20708
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and ru
nvd.nist.gov