Cisco RV260P Firmware vulnerabilities

13 CVEs affecting Cisco RV260P Firmware, 3 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-32433, published 2025-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-32433: Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability, published 2025-04-16. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2025-06-09. EPSS: 98.8% chance of exploitation in the next 30 days. Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated…
CVE-2022-20703: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability, published 2022-02-10. High severity, CVSS 8.0. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 9.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2022-20700: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability, published 2022-02-10. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 5.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2022-20705, published 2022-02-10. Critical severity, CVSS 9.8. EPSS: 80% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2021-1472, published 2021-04-08. Critical severity, CVSS 9.8. EPSS: 72% chance of exploitation in the next 30 days. Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload…
CVE-2022-20706, published 2022-02-10. High severity, CVSS 8.1. EPSS: 5.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2022-20702, published 2022-02-10. High severity, CVSS 7.2. EPSS: 4.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2022-20841, published 2022-08-10. Critical severity, CVSS 9.0. EPSS: 3.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service…
CVE-2022-20704, published 2022-02-10. Medium severity, CVSS 4.8. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2022-20827, published 2022-08-10. Critical severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service…