Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2022-20699— Cisco Small Business RV Series Routers Vulnerabilities

Quick assessment

Affected
Cisco Cisco Small Business RV Series Router Firmware
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco Rv340 Dual Wan Gigabit Vpn Router是美国思科（Cisco）公司的一款双广域网千兆 Vpn 路由器。 Cisco RV340 Dual WAN Gigabit VPN Router存在缓冲区错误漏洞，该漏洞源于处理HTTP请求时边界错误导致的，远程攻击者可利用该漏洞可以向存在该漏洞的设备发送一个特别制作的HTTP请求从而在目标系统上执行任意代码。

CVSS 10.0 · Critical KEV EPSS 72.46% · P99

Public Exploits 1

Metasploit · 1 cisco_rv340_sslvpn.rb [exploit]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-20699

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco Small Business RV Series Routers Vulnerabilities
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Rv340 Dual Wan Gigabit Vpn Router 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Rv340 Dual Wan Gigabit Vpn Router是美国思科（Cisco）公司的一款双广域网千兆 Vpn 路由器。 Cisco RV340 Dual WAN Gigabit VPN Router存在缓冲区错误漏洞，该漏洞源于处理HTTP请求时边界错误导致的，远程攻击者可利用该漏洞可以向存在该漏洞的设备发送一个特别制作的HTTP请求从而在目标系统上执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Cisco Cisco Small Business RV Series Router Firmware n/a -

II. Public POCs for CVE-2022-20699

# POC Description Source Link Shenlong Link
1 Cisco Anyconnect VPN unauth RCE (rwx stack) https://github.com/Audiobahn/CVE-2022-20699 POC Details
2 None https://github.com/puckiestyle/CVE-2022-20699 POC Details
3 None https://github.com/rohankumardubey/CVE-2022-20699 POC Details
4 None https://github.com/rohan-flutterint/CVE-2022-20699 POC Details
5 None https://github.com/Rohan-flutterint/CVE-2022-20699 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-20699

请登录查看更多情报信息。

Vendor Advisories for CVE-2022-20699 (2)

Exploits & Public PoCs for CVE-2022-20699 (1)

Same Patch Batch · Cisco · 2022-02-10 · 18 CVEs total

CVE-2022-20706 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20749 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20712 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20711 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20710 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20709 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20708 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20707 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20705 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20704 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20703 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20702 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20701 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20700 10.0 CRITICAL Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20738 5.8 MEDIUM Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability
CVE-2022-20630 4.4 MEDIUM Cisco DNA Center Information Disclosure Vulnerability
CVE-2022-20680 4.3 MEDIUM Cisco Prime Service Catalog Information Disclosure Vulnerability

IV. Related Vulnerabilities

Same product: Cisco Small Business RV Series Router Firmware
Same vendor: Cisco
Same weakness: CWE-121

V. Comments for CVE-2022-20699

No comments yet

Leave a comment