CVE-2022-20703VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2022-20703: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Affects Cisco Small Business RV160, RV260, RV340, and RV345 Series RoutersSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/03/2022
KEV deadline: 03/17/2022
EPSS: 9.2% chance of exploitation in 30 days – higher than 95% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2022-20703 (opens in a new tab)

Description

CVE-2022-20703 is a stack-based buffer overflow vulnerability affecting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. This vulnerability allows attackers to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause denial of service (DoS). It has been exploited in the wild. No explicit patch information is provided in the input data.

Summary

The vulnerability identified as CVE-2022-20703 affects Cisco Small Business RV Series Routers (models RV160, RV260, RV340, and RV345). It is a stack-based buffer overflow that enables attackers to perform multiple malicious actions including arbitrary code execution, privilege escalation, command execution, bypassing authentication and authorization, running unsigned software, and causing denial of service. The vulnerability has been confirmed to be exploited in the wild. The CWE associated is CWE-347, which relates to improper verification of cryptographic signatures. No patch or remediation details are provided in the available data.

Impact

Successful exploitation of this vulnerability can lead to full compromise of affected routers, including arbitrary code execution and privilege escalation. Attackers can bypass security controls such as authentication and authorization, potentially leading to unauthorized access and control. The vulnerability also allows denial of service conditions, disrupting network availability. Known exploitation in the wild indicates active threat to affected devices.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor Cisco's security advisories for updates. Apply any recommended temporary mitigations from Cisco if provided. Given the severity and exploitation in the wild, affected devices should be isolated or monitored closely until patched.

Weaknesses

CWE-347Improper Signature Verification (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:41:41 UTC

Weaknesses

References

Related threats