CVE-2022-20701VulnerabilityPublished 03/03/2022Updated 10/24/2026
CVE-2022-20701: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Affects Cisco Small Business RV160, RV260, RV340, and RV345 Series RoutersSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 03/03/2022
- KEV deadline
- 03/17/2022
- EPSS
- 9.7% chance of exploitation in 30 days – higher than 95% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2022-20701 is a stack-based buffer overflow vulnerability affecting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. This flaw could allow an attacker to execute arbitrary code, elevate privileges, bypass authentication and authorization, run unsigned software, or cause denial of service. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.