Cisco RV160 VPN Router Firmware vulnerabilities

10 CVEs affecting Cisco RV160 VPN Router Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20045, published 2023-01-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-1293, published 2021-02-04. Critical severity, CVSS 9.8. EPSS: 5.4% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute…
CVE-2021-1294, published 2021-02-04. Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute…
CVE-2021-1295, published 2021-02-04. Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute…
CVE-2021-1291, published 2021-02-04. Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute…
CVE-2021-1290, published 2021-02-04. Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute…
CVE-2021-1289, published 2021-02-04. Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute…
CVE-2021-1292, published 2021-02-04. Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute…
CVE-2021-1297, published 2021-02-04. High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to conduct…
CVE-2021-1296, published 2021-02-04. High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to conduct…
CVE-2023-20045, published 2023-01-20. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business RV160 and RV260 Series VPN Routers could allow an authenticated, remote attacker to execute arbitrary commands on the…