According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by multiple vulnerabilities:

  - A vulnerability in the SSL VPN module of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN     Gigabit VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected     device. (CVE-2022-20699)

  - Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV Series Routers could     allow a remote attacker to elevate privileges to root. (CVE-2022-20700, CVE-2022-20701, CVE-2022-20702)

  - A vulnerability in the software image verification feature of Cisco Small Business RV Series Routers could allow     an unauthenticated, local attacker to install and boot a malicious software image or execute unsigned binaries     on an affected device. (CVE-2022-20703)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Cisco Small Business RV Series Routers Multiple Vulnerabilities (cisco-sa-smb-mult-vuln-KA9PK6D)

critical Nessus Plugin ID 157361

Version 1.17

Version 1.16

Version 1.17 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 1.16 Dec 6, 2022, 2:54 AM Reference Plugin Feed: 202212060254