CVE-2020-3294

CVE-2020-3294 describes multiple stack overflow vulnerabilities in the web-based management interface of Cisco Small Business RV320, RV325, RV016, RV042, and RV082 Series Routers. An authenticated, remote attacker with administrative privileges can exploit these vulnerabilities by sending crafted requests with overly large input values. This can lead to a device crash or arbitrary code execution with root privileges on the underlying operating system. The vulnerability has a CVSS score of 7.2 (High), indicating a high severity due to its network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While requiring administrative authentication, a successful exploit grants full control over the device. Currently, there is no evidence of active exploitation in the wild, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public attention.