Rewterz Threat Advisory – CVE-2022-20923 – Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Vulnerability

Severity

Medium

Analysis Summary

CVE-2022-20923

Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow a remote attacker to bypass security restrictions, caused by improper implementation of the password validation algorithm. By using specially-crafted credentials, an attacker could exploit this vulnerability to bypass authentication and access the IPSec VPN network.

Impact

• Security Bypass

Indicators Of Compromise

CVE

• CVE-2022-20923

Affected Vendors

Cisco

Affected Products

• Cisco RV110W Wireless-N VPN Firewall
• Cisco RV130W Wireless-N Multifunction VPN Router
• Cisco RV215W Wireless-N VPN Router
• Cisco RV130 VPN Router

Remediation

Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.

Cisco Security Advisory