Command injection in Cisco Small Business RV Series Router Firmware
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-77.
Summary
A vulnerability in the web-based management interface of Cisco Small Business RV160 and RV260 Series VPN Routers could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands using root-level privileges on the affected device. To exploit this vulnerability, the attacker must have valid Administrator-level credentials on the affected device.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Cisco | Cisco Small Business RV Series Router Firmware | N/A | — | No fix listed | CNA |
- Cisco Small Business RV Series Router Firmware VendorCisco Affected N/A Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:* | before 1.0.01.04 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:rv160_vpn_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:* | before 1.0.01.04 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:rv160w_wireless-ac_vpn_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:* | before 1.0.01.04 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:rv260_vpn_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:* | before 1.0.01.04 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
- cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:* Versions before 1.0.01.04 Vulnerable ·Cisco
- cpe:2.3:h:cisco:rv160_vpn_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:* Versions before 1.0.01.04 Vulnerable ·Cisco
- cpe:2.3:h:cisco:rv160w_wireless-ac_vpn_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:* Versions before 1.0.01.04 Vulnerable ·Cisco
- cpe:2.3:h:cisco:rv260_vpn_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:* Versions before 1.0.01.04 Vulnerable ·Cisco
- cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-20045
- 2026-10-03 Alias added: GHSA-fxmm-jp7q-8qvp
References
Advisory 1
More Cisco Rv160 Vpn Router Firmware vulnerabilities
- TI-2021-01020 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities CVSS 3.1CRITICAL 9.8
- TI-2021-01022 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities CVSS 3.1CRITICAL 9.8
- TI-2021-01021 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities CVSS 3.1CRITICAL 9.8
- TI-2021-01019 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities CVSS 3.1CRITICAL 9.8
- TI-2021-01018 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities CVSS 3.1CRITICAL 9.8
- TI-2021-01017 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities CVSS 3.1CRITICAL 9.8
Sources
- CVE-2023-20045 · CVE Program
- CVE-2023-20045 · NVD
- FIRST EPSS
- GHSA-fxmm-jp7q-8qvp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences