CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Small Business RV Series Routers Remote Command Execution and Privilege Escalation (CVE-2022-20708)
[Affected Scope] Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers
[Impact] An authenticated, adjacent attacker can execute arbitrary code with root privileges or cause a denial of service (DoS) via stack-based buffer overflow and command injection
[Mitigation] Immediately apply the latest firmware patches provided by Cisco and restrict access to the web-based management interface
Cisco Small Business RV Series Routers Multiple Vulnerabilities Advisory (CVE-2022-20703)
[Affected Scope] Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers
[Impact] Unauthenticated attackers can execute arbitrary code, elevate privileges, bypass authentication, and run unsigned software
[Mitigation] Apply the official Cisco firmware updates immediately and restrict access to the management interface
Tenda AC7 / AC9 / AC10 Routers goform/setUsbUnload Remote Command Injection Vulnerability (CVE-2018-14558) Analysis and Mitigation Guide
[Affected Scope] Tenda AC7 (firmware through V15.03.06.44_CN), AC9 (firmware through V15.03.05.19(6318)_CN), and AC10 (firmware through V15.03.06.23_CN)
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending a crafted HTTP request, leading to complete device compromise
[Mitigation] Apply the latest official firmware updates immediately, disable WAN-side remote management, and restrict access to the web interface