CVE:CVE-2022-20886
CNNVD:CNNVD-202207-2157
Cisco Small Business是美国思科（Cisco）公司的一个交换机。
Cisco Small Business RV110W、RV130、RV130W 和 RV215W 路由器存在操作系统命令注入漏洞，该漏洞源于传入 HTTP 数据包中的用户字段验证不足，远程攻击者利用次漏洞可以在受影响的设备上执行任意代码或导致设备意外重启，从而导致拒绝服务 (DoS) 。
solution:Upgrade cisco rv215w_firmware to a higher version than 1.0.3.55,and avoid the version 1.0.3.55; Upgrade cisco rv130w_firmware to a higher version than 1.0.3.55,and avoid the version 1.0.3.55; Upgrade cisco rv130_firmware to a higher version than 1.0.3.55,and avoid the version 1.0.3.55; Upgrade cisco rv110w_firmware to a higher version than 1.0.3.55,and avoid the version 1.0.3.55; Upgrade cisco application_extension_platform to a higher version than 1.0.3.55,and avoid the version 1.0.3.55