CVE-2022-20799

CVE-2022-20799 describes multiple command injection vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 series routers. These flaws stem from insufficient input validation, allowing an authenticated, remote attacker with Administrator credentials to execute arbitrary commands on the underlying Linux operating system. Rated High with a CVSS score of 7.2, successful exploitation could lead to full compromise of the device (C:H/I:H/A:H). There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.