CVE-2023-20128

CVE-2023-20128 describes multiple command injection vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers. These flaws, stemming from insufficient input validation, allow an authenticated, remote attacker with Administrator credentials to execute arbitrary commands as the root user on the underlying Linux operating system. Rated High severity with a CVSS score of 7.2, the attack requires high privileges but has low attack complexity and can lead to complete compromise of confidentiality, integrity, and availability. Cisco has not released patches, and while there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness within the security community.