CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Small Business RV Series Routers Remote Code Execution and Privilege Escalation (CVE-2022-20700)
[Affected Scope] Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers
[Impact] Unauthenticated remote attackers can execute arbitrary code, elevate privileges, bypass authentication, and run unsigned software to fully compromise the device
[Mitigation] Immediately apply the latest firmware patches provided by Cisco and disable remote WAN management access
Cisco IOS Software Login Enhancements Remote Denial of Service Vulnerability (CVE-2018-0180)
[Affected Scope] Cisco devices running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later with Login Enhancements (Login Block) enabled
[Impact] An unauthenticated, remote attacker can trigger an unexpected system reload, leading to a complete Denial of Service (DoS) condition
[Mitigation] Apply the official Cisco IOS software updates, or temporarily disable the 'login block-for' feature and restrict virtual terminal (vty) access using infrastructure ACLs