CVE-2022-20753 Cisco Small Business RV Series Routers Remote Code Execution Vulnerability
An authenticated administrator can execute arbitrary code on Cisco Small Business RV Series Routers via malicious input in the web management interface.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-20753?
CVE-2022-20753 is a medium-severity memory corruption vulnerability in Cisco Small Business RV Series Router Firmware, published on 4 May 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability in web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious input to an affected device. A successful exploit could allow the attacker to execute remote code on the affected device. To exploit this vulnerability, an attacker would need to have valid Administrator credentials on the affected device.
Which versions are affected by CVE-2022-20753?
It affects 4 products.
Products include Cisco Rv340 Firmware, Cisco Rv340w Firmware, Cisco Rv345 Firmware, Cisco Rv345p Firmware.
How do I fix CVE-2022-20753?
No fix has been published for CVE-2022-20753 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-20753 being exploited?
There is no known exploitation of CVE-2022-20753 in the wild and no public exploit code.
Other vulnerabilities in Cisco Small Business RV Series Router Firmware
- CVE-2022-20699 Cisco Small Business RV Series Routers Stack-based Buffer Overflow
- CVE-2022-20701 Cisco Small Business RV Series Routers Stack-based Buffer Overflow
- CVE-2022-20708 Cisco Small Business RV Series Routers Stack-based Buffer Overflow
- CVE-2022-20707 Cisco Small Business RV Series Routers Vulnerabilities
- CVE-2022-20709 Cisco Small Business RV Series Routers Vulnerabilities
Sources
Also known as GHSA-x2hp-jfj2-m3hc.