All vulnerabilities
CVE-2023-20118

Cisco Small Business RV Series Routers Command Injection Vulnerability

Cisco Small Business RV Series RoutersNetwork & edge
Open in ThreatlineRecord JSON
CVSS
6.5Medium
ExploitationExploited in the wildAdded to KEV 3 Mar 2025CISA KEV
Exploit odds (EPSS)54.1%Chance of exploitation activity in the next 30 days, higher than 99% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Federal deadline24 Mar 2025Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 5 Apr 2023, 16:05 UTCPublishedCVE List
  2. 3 Mar 2025Added to CISA KEVCISA KEV

Description

Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface. Successful exploitation could allow an authenticated, remote attacker to gain root-level privileges and access unauthorized data.

Text from CVE List

Affected versions 18

  • Cisco Small Business RV Series Router Firmwareaffected: 1.0.1.17CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.0.2.03CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.1.0.09CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.1.1.19CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.1.1.06CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.2.1.13CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.2.1.14CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.3.1.12CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.3.2.02CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.3.1.10CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.4.2.15CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.4.2.17CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.4.2.19CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.4.2.20CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.4.2.22CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.5.1.05CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.5.1.11CVE List
  • Cisco Small Business RV Series Router Firmwareaffected: 1.5.1.13CVE List

References 3