CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Small Business RV Series Routers Privilege Escalation and Remote Code Execution Vulnerability (CVE-2022-20701)
[Affected Scope] Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers
[Impact] Local attackers can trigger a stack-based buffer overflow to elevate privileges to root and execute arbitrary code
[Mitigation] Immediately apply the latest firmware updates provided by Cisco and restrict access to the management interface
Cisco RV320 and RV325 VPN Routers Remote Command Execution Vulnerability Analysis and Mitigation Guide (CVE-2019-1652)
[Affected Scope] Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
[Impact] An authenticated, remote attacker with administrative privileges can execute arbitrary commands as root on the underlying Linux shell by sending malicious HTTP POST requests
[Mitigation] Immediately apply the official firmware updates released by Cisco and restrict access to the web-based management interface