CVE-2022-20708VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2022-20708: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Affects Cisco Small Business RV160, RV260, RV340, and RV345 Series RoutersSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/03/2022
KEV deadline: 03/17/2022
EPSS: 14.9% chance of exploitation in 30 days – higher than 96% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2022-20708 (opens in a new tab)

Description

CVE-2022-20708 is a stack-based buffer overflow vulnerability affecting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. This vulnerability allows an attacker to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS). It has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

Summary

The vulnerability CVE-2022-20708 in Cisco Small Business RV Series Routers is a stack-based buffer overflow that enables attackers to perform multiple malicious actions including arbitrary code execution, privilege escalation, command execution, bypassing authentication and authorization, running unsigned software, and causing denial of service. The affected products are Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. Exploitation has been observed in the wild. No patch or remediation details are included in the provided data.

Impact

Successful exploitation of this vulnerability can lead to full compromise of the affected routers, allowing attackers to execute arbitrary code and commands, bypass security controls, and disrupt network availability through denial of service. The presence of known exploits in the wild increases the urgency and risk associated with this vulnerability.

Mitigation

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Until a patch is applied, limit exposure of affected devices to untrusted networks and monitor for exploitation attempts.

Weaknesses

CWE-121Stack-based Buffer Overflow (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:41:44 UTC

Weaknesses

References

Related threats