Cisco security advisory-CVE-2022-20701
NAME
Cisco – Multiple
- Platforms Affected:
Multiple - Risk Level:
medium - CVE Type:
Out-of-bounds write
DESCRIPTION
CVE-2022-20701 is an out-of-bounds write vulnerability impacting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. A proof of concept (PoC) was not observed publicly or in the underground. Security researchers at the Cybersecurity and Infrastructure Security Agency (CISA) claimed the vulnerability was actively exploited in the wild.
CVSS Information:
- CVSS 2.0 SCORE:
- CVSS 3.0 SCORE: 9
- Exploit Disclosed in the Public:
true - Exploit Weaponised:
true - PoC Link:
hXXps://www[.]cisa[.]gov/known-exploited-vulnerabilities-catalog
MITIGATION
Cisco addressed the vulnerability in a security advisory with updated versions.
- Reference Link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D - Patch Available:
available
If you like the site, please consider joining the telegram channel and supporting us on Patreon using the button below.
