Rv340 Firmware vulnerabilities

22 known vulnerabilities in Rv340 Firmware from Cisco. 22 are rated high or critical, and 6 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Exploited

  CVE-2025-32433Apr 16, 2025ErlangEPSS 98.9%

  Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protoco

• 9.8 Critical severity

  Cisco Small Business RV Series Router Firmware: Unrestricted Upload of File with Dangerous Type

  CVE-2023-20073Apr 5, 2023CiscoEPSS 90.1%

  A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insuffici

• 7.2 High severity

  Cisco Small Business RV Series Router Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-20007Jan 20, 2023Cisco

  A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code or cause the web-based management process on the

• 9.8 Critical severity

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers…

  CVE-2022-20842Aug 10, 2022CiscoEPSS 1.91%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information ab

• 10.0 Critical severity

  Cisco Small Business RV Series Router Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-20827Aug 10, 2022CiscoEPSS 1.98%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information ab

• 9.0 Critical severity

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers…

  CVE-2022-20841Aug 10, 2022CiscoEPSS 3.43%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information ab

• 7.2 High severity

  Cisco Small Business RV Series Router Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-20801May 4, 2022CiscoEPSS 2.01%

  Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. Thes

• 7.2 High severity

  Cisco Small Business RV Series Router Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-20799May 4, 2022CiscoEPSS 1.69%

  Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. Thes

• 7.2 High severity

  Cisco Small Business RV Series Router Firmware: Out-of-bounds Write

  CVE-2022-20753May 4, 2022CiscoEPSS 2.22%

  A vulnerability in web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient validation of user-suppli

• 9.8 Critical severity

  Cisco Small Business RV Series Router Firmware: Out-of-bounds Write

  CVE-2022-20749Feb 10, 2022CiscoEPSS 4.01%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 9.8 Critical severity

  Cisco Small Business RV Series Router Firmware: Out-of-bounds Write

  CVE-2022-20712Feb 10, 2022CiscoEPSS 3.03%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 9.8 Critical severity

  Cisco Small Business RV Series Router Firmware: Out-of-bounds Write

  CVE-2022-20711Feb 10, 2022CiscoEPSS 4.92%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 7.5 High severity

  Cisco Small Business RV Series Router Firmware: Out-of-bounds Write

  CVE-2022-20709Feb 10, 2022CiscoEPSS 3.8%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 8.0 High severity

  Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited

  CVE-2022-20708Feb 10, 2022CiscoEPSS 14.9%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 7.3 High severity

  Cisco Small Business RV Series Router Firmware: Out-of-bounds Write

  CVE-2022-20707Feb 10, 2022CiscoEPSS 75.3%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 8.1 High severity

  Cisco Small Business RV Series Router Firmware: Out-of-bounds Write

  CVE-2022-20706Feb 10, 2022CiscoEPSS 5.57%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 9.8 Critical severity

  Cisco Small Business RV Series Router Firmware: Out-of-bounds Write

  CVE-2022-20705Feb 10, 2022CiscoEPSS 80%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 8.0 High severity

  Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited

  CVE-2022-20703Feb 10, 2022CiscoEPSS 9.2%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 7.2 High severity

  Cisco Small Business RV Series Router Firmware: Out-of-bounds Write

  CVE-2022-20702Feb 10, 2022CiscoEPSS 4.6%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 7.8 High severity

  Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited

  CVE-2022-20701Feb 10, 2022CiscoEPSS 9.75%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 9.8 Critical severity

  Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited

  CVE-2022-20700Feb 10, 2022CiscoEPSS 5.66%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot

• 9.8 Critical severity

  Cisco Small Business RV Series Routers Stack-based Buffer Overflow Exploited

  CVE-2022-20699Feb 10, 2022CiscoEPSS 72.5%

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization prot