CVE:CVE-2022-20749
CNNVD:CNNVD-202202-170
Cisco Small Business是美国思科（Cisco）公司的一个交换机。
Cisco Small Business RV 系列路由器存在缓冲区错误漏洞，该漏洞源于对用户提供的输入的验证不充分。攻击者可以通过向受影响的设备发送恶意输入来利用这些漏洞。成功的利用可能允许攻击者在底层 Linux 操作系统上执行任意命令。
solution:Upgrade cisco rv340_firmware to a higher version than 1.0.03.24,and avoid the version (,1.0.03.24]; Upgrade cisco rv340w_firmware to a higher version than 1.0.03.24,and avoid the version (,1.0.03.24]; Upgrade cisco rv345_firmware to a higher version than 1.0.03.24,and avoid the version (,1.0.03.24]; Upgrade cisco rv345p_firmware to a higher version than 1.0.03.24,and avoid the version (,1.0.03.24]