Known vulnerabilities in Cisco Small Business RV260P VPN Router with POE

Vendor: Cisco Systems, Inc
Software: Cisco Small Business RV260P VPN Router with POE
Software CPE: cpe:2.3:h:cisco_systems:cisco_small_business_rv260p_vpn_router_with_poe:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 26
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Small Business RV260P VPN Router with POE Cisco Small Business RV260P VPN Router with POE is affected by 26 known vulnerabilities: 2 critical, 12 high, 7 medium, 5 low Critical High Medium Low

Vulnerabilities (26)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71101 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20045		 CWE-78 Low
No
No
 - 11.01.2023 SB2023011149
#VU66107 - Command injection
CVE-2022-20841		 CWE-77 High
No
No
 1.0.01.09 04.08.2022 SB2022080427
#VU66106 - Command injection
CVE-2022-20827		 CWE-77 High
No
No
 1.0.01.09 04.08.2022 SB2022080427
#VU60260 - Memory corruption
CVE-2022-20712		 CWE-119 High
No
No
 - 03.02.2022 SB2022020301
SB2022020302
#VU60258 - Improper Handling of Exceptional Conditions
CVE-2022-20710		 CWE-755 Medium
No
No
 - 03.02.2022 SB2022020301
SB2022020302
#VU60253 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20706		 CWE-78 Medium
No
No
 - 02.02.2022 SB2022020301
SB2022020302
#VU60252 - Improper Authentication
CVE-2022-20705		 CWE-287 High
Available
No
 - 02.02.2022 SB2022020301
SB2022020302
#VU60251 - Improper Certificate Validation
CVE-2022-20704		 CWE-295 Medium
No
No
 - 02.02.2022 SB2022020301
SB2022020302
#VU60250 - Improper Verification of Cryptographic Signature
CVE-2022-20703		 CWE-347 Low
No
Exploited
 - 02.02.2022 SB2022020301
SB2022020302
#VU60249 - Improper Authorization
CVE-2022-20702		 CWE-285 Low
No
No
 - 02.02.2022 SB2022020301
SB2022020302
#VU60248 - Improper Authorization
CVE-2022-20701		 CWE-285 Critical
No
Exploited
 - 02.02.2022 SB2022020301
SB2022020302
#VU60247 - Improper Authorization
CVE-2022-20700		 CWE-285 Critical
No
Exploited
 - 02.02.2022 SB2022020301
SB2022020302
#VU55604 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-1602		 CWE-78 High
No
No
 1.0.01.04 05.08.2021 SB2021080514
#VU51992 - Memory corruption
CVE-2021-1309		 CWE-119 Medium
No
No
 1.0.01.03 08.04.2021 SB2021040812
#VU51991 - Resource exhaustion
CVE-2021-1308		 CWE-400 Low
No
No
 1.0.01.03 08.04.2021 SB2021040812
#VU51990 - Missing release of memory after effective lifetime
CVE-2021-1251		 CWE-401 Low
No
No
 1.0.01.03 08.04.2021 SB2021040812
#VU51986 - Improper Access Control
CVE-2021-1472		 CWE-284 Medium
Available
No
 1.0.01.03 08.04.2021 SB2021040810
#VU50326 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-1297		 CWE-22 Medium
No
No
 1.0.01.02 04.02.2021 SB2021020417
#VU50325 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-1296		 CWE-22 Medium
No
No
 1.0.01.02 04.02.2021 SB2021020417
#VU50324 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-1295		 CWE-94 High
No
No
 1.0.01.02 04.02.2021 SB2021020417


Showing elements 1 - 20 out of 26