CVE-2022-20842: Cisco RV340 Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco RV340 Firmware: before 1.0.03.28 (fixed in 1.0.03.28)
• Cisco RV340W Firmware: before 1.0.03.28 (fixed in 1.0.03.28)
• Cisco RV345 Firmware: before 1.0.03.28 (fixed in 1.0.03.28)
• Cisco RV345P Firmware: before 1.0.03.28 (fixed in 1.0.03.28)

Published 2022-08-10. Last modified 2026-06-17.