CVE:CVE-2022-20888
CNNVD:CNNVD-202207-2155
Cisco Small Business是美国思科（Cisco）公司的一个交换机。
Cisco Small Business RV110W、RV130、RV130W、RV215W Routers存在操作系统命令注入漏洞，该漏洞源于传入 HTTP 数据包中的用户字段验证不足。攻击者利用该漏洞通过特制请求执行任意代码或导致设备意外重启，从而导致拒绝服务 (DoS)。
solution:Upgrade cisco rv215w_firmware to a higher version than 1.0.3.55,and avoid the version 1.0.3.55; Upgrade cisco rv130w_firmware to a higher version than 1.0.3.55,and avoid the version 1.0.3.55; Upgrade cisco rv130_firmware to a higher version than 1.0.3.55,and avoid the version 1.0.3.55; Upgrade cisco rv110w_firmware to a higher version than 1.0.3.55,and avoid the version 1.0.3.55; Upgrade cisco application_extension_platform to a higher version than 1.0.3.55,and avoid the version 1.0.3.55