Description
A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 17 Mar 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.