CVE-2022-20705

CVE-2022-20705 is a critical vulnerability affecting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers, encompassing multiple flaws that allow for arbitrary code execution, privilege escalation, command injection, authentication bypass, and denial of service. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network without authentication or user interaction, leading to complete compromise of affected devices. While not listed in CISA KEV, public exploit modules are available (e.g., Metasploit), and it has garnered significant community discussion and media coverage, indicating a high likelihood of exploitation.