CVE-2022-20710: Cisco Small Business RV Series Routers Vulnerabilities

Published Feb 10, 2022
·
Updated

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Affected Software

8 affected components
Cisco RV340 Firmware<=1.0.03.24
Cisco RV340
Cisco Rv340w Firmware<=1.0.03.24
Cisco RV340W
Cisco Rv345 Firmware<=1.0.03.24
Cisco RV345
Cisco Rv345p Firmware<=1.0.03.24
Cisco RV345P

Event History

Feb 10, 2022
CVE Published
via MITRE·05:06 PM
Data Sourced
via MITRE·05:06 PM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What are the affected software versions of CVE-2022-20710?

The affected software versions of CVE-2022-20710 are Cisco RV340 Firmware up to and including 1.0.03.24, Cisco RV340w Firmware up to and including 1.0.03.24, Cisco RV345 Firmware up to and including 1.0.03.24, and Cisco RV345p Firmware up to and including 1.0.03.24.

2

What is the severity level of CVE-2022-20710?

The severity level of CVE-2022-20710 is critical with a CVSS score of 5.3.

3

What are the potential impacts of CVE-2022-20710?

CVE-2022-20710 allows an attacker to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, and fetch and run unsigned software.

4

Is Cisco RV340 affected by CVE-2022-20710?

No, Cisco RV340 is not vulnerable to CVE-2022-20710.

5

Is Cisco RV340w affected by CVE-2022-20710?

No, Cisco RV340w is not vulnerable to CVE-2022-20710.

6

Is Cisco RV345 affected by CVE-2022-20710?

No, Cisco RV345 is not vulnerable to CVE-2022-20710.

7

Is Cisco RV345p affected by CVE-2022-20710?

No, Cisco RV345p is not vulnerable to CVE-2022-20710.

8

What is the Common Weakness Enumeration (CWE) ID of CVE-2022-20710?

The Common Weakness Enumeration (CWE) IDs associated with CVE-2022-20710 are CWE-787 and CWE-121.

9

Where can I find more information about CVE-2022-20710?

You can find more information about CVE-2022-20710 at the following link: [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D).

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203