CVE-2022-20702: (Pwn2Own) Cisco RV340 utility-ping-request Insecure Temporary File Local Privilege Escalation Vulnerability
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Cisco RV340 routers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the utility-ping-request script. The issue results from the creation of a temporary file with insecure permissions. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-20702?
The severity of CVE-2022-20702 is critical.
How can local attackers exploit CVE-2022-20702?
Local attackers can exploit CVE-2022-20702 by escalating privileges on affected Cisco RV340 routers.
What is the affected software for CVE-2022-20702?
The affected software for CVE-2022-20702 includes Cisco RV340 routers with firmware version up to 1.0.03.24.
Where can I find more information about CVE-2022-20702?
You can find more information about CVE-2022-20702 on the Cisco Security Advisory and Zero Day Initiative advisories.
What is the CWE ID for CVE-2022-20702?
The CWE ID for CVE-2022-20702 is CWE-787 and CWE-121.