CVE:CVE-2022-20706
CNNVD:CNNVD-202202-167
Cisco Small Business是美国思科（Cisco）公司的一个交换机。
Cisco Small Business RV 系列路由器存在缓冲区错误漏洞，该漏洞源于对用户提供的输入的验证不充分。攻击者可以通过向受影响的设备发送恶意输入来利用此漏洞。成功的利用可能允许攻击者在底层 Linux 操作系统上执行任意命令。要利用此漏洞，攻击者必须利用中间人位置或在连接到易受攻击路由器的特定网络设备上建立立足点。
solution:Upgrade cisco rv340_firmware to a higher version than 1.0.03.24,and avoid the version (,1.0.03.24]; Upgrade cisco rv340w_firmware to a higher version than 1.0.03.24,and avoid the version (,1.0.03.24]; Upgrade cisco rv345_firmware to a higher version than 1.0.03.24,and avoid the version (,1.0.03.24]; Upgrade cisco rv345p_firmware to a higher version than 1.0.03.24,and avoid the version (,1.0.03.24]; Upgrade cisco rv160_firmware to a higher version than 1.0.01.05,and avoid the version (,1.0.01.05]; Upgrade cisco rv160w_firmware to a higher version than 1.0.01.05,and avoid the version (,1.0.01.05]; Upgrade cisco rv260_firmware to a higher version than 1.0.01.05,and avoid the version (,1.0.01.05]; Upgrade cisco rv260p_firmware to a higher version than 1.0.01.05,and avoid the version (,1.0.01.05]; Upgrade cisco rv260w_firmware to a higher version than 1.0.01.05,and avoid the version (,1.0.01.05]