Cisco RV340 Firmware vulnerabilities

35 CVEs affecting Cisco RV340 Firmware, 6 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-32433, published 2025-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-32433: Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability, published 2025-04-16. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2025-06-09. EPSS: 98.8% chance of exploitation in the next 30 days. Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated…
CVE-2022-20699: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability, published 2022-02-10. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 72.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2022-20708: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability, published 2022-02-10. High severity, CVSS 8.0. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 14.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2022-20701: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability, published 2022-02-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 9.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2022-20703: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability, published 2022-02-10. High severity, CVSS 8.0. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 9.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2022-20700: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability, published 2022-02-10. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 5.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2023-20073, published 2023-04-05. Critical severity, CVSS 9.8. EPSS: 90.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files…
CVE-2022-20705, published 2022-02-10. Critical severity, CVSS 9.8. EPSS: 80% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2022-20707, published 2022-02-10. High severity, CVSS 7.3. EPSS: 75.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…
CVE-2021-1472, published 2021-04-08. Critical severity, CVSS 9.8. EPSS: 72% chance of exploitation in the next 30 days. Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload…

Latest

CVE-2023-20007, published 2023-01-20. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute…
CVE-2022-20842, published 2022-08-10. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service…
CVE-2022-20827, published 2022-08-10. Critical severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service…
CVE-2022-20841, published 2022-08-10. Critical severity, CVSS 9.0. EPSS: 3.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service…
CVE-2022-20801, published 2022-05-04. High severity, CVSS 7.2. EPSS: 2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands…
CVE-2022-20799, published 2022-05-04. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands…
CVE-2022-20753, published 2022-05-04. High severity, CVSS 7.2. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability in web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This…
CVE-2022-20749, published 2022-02-10. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute…