CVE-2022-20910

CVE-2022-20910 describes multiple vulnerabilities in the web-based management interface of several Cisco Small Business RV series routers (RV110W, RV130, RV130W, and RV215W). These vulnerabilities, stemming from insufficient input validation, allow an authenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service. With a CVSS score of 7.2 (High), successful exploitation requires valid administrator credentials and could lead to full system compromise or device restarts. There is no evidence of active exploitation, public exploit code, or significant community discussion, and Cisco has not released patches for these end-of-life products.