Tech »  Topic »  Multiple Flaws in Cisco Small Business Routers Allow Remote Attackers to Execute Arbitrary Code

Multiple Flaws in Cisco Small Business Routers Allow Remote Attackers to Execute Arbitrary Code


Cisco has released software updates that address multiple vulnerabilities in Cisco Small Business VPN routers which allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device.

Vulnerable Products

The vulnerabilities tracked as CVE-2022-20827 and CVE-2022-20841 affect the following Cisco products:

  • RV160 VPN Routers
  • RV160W Wireless-AC VPN Routers
  • RV260 VPN Routers
  • RV260P VPN Routers with PoE
  • RV260W Wireless-AC VPN Routers
  • RV340 Dual WAN Gigabit VPN Routers
  • RV340W Dual WAN Gigabit Wireless-AC VPN Routers
  • RV345 Dual WAN Gigabit VPN Routers
  • RV345P Dual WAN Gigabit POE VPN Routers

The vulnerability tracked as CVE-2022-20842 affects the following Cisco products:

  • RV340 Dual WAN Gigabit VPN Routers
  • RV340W Dual WAN Gigabit Wireless-AC VPN Routers
  • RV345 Dual WAN Gigabit VPN Routers
  • RV345P Dual WAN Gigabit POE VPN Routers

In an advisory, Cisco noted that “The vulnerabilities are dependent on one another. Exploitation of one of the ...


Copyright of this story solely belongs to gbhackers . To see the full text click HERE