CVE-2022-20827: Cisco RV160 Firmware

Critical severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco RV160 Firmware: before 1.0.01.05 (fixed in 1.0.01.05)
• Cisco RV160W Firmware: before 1.0.01.05 (fixed in 1.0.01.05)
• Cisco RV260 Firmware: before 1.0.01.05 (fixed in 1.0.01.05)
• Cisco RV260P Firmware: before 1.0.01.05 (fixed in 1.0.01.05)
• Cisco RV260W Firmware: before 1.0.01.05 (fixed in 1.0.01.05)
• Cisco RV340 Firmware: before 1.0.03.26 (fixed in 1.0.03.26)
• Cisco RV340W Firmware: before 1.0.03.26 (fixed in 1.0.03.26)
• Cisco RV345 Firmware: before 1.0.03.26 (fixed in 1.0.03.26)
• Cisco RV345P Firmware: before 1.0.03.26 (fixed in 1.0.03.26)

Published 2022-08-10. Last modified 2026-06-17.