CVE-2022-20876

CVE-2022-20876 describes multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers. These flaws, stemming from insufficient validation of user fields, allow an authenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service. The vulnerability has a CVSS score of 7.2 (High), indicating a significant impact if exploited. While requiring Administrator credentials, successful exploitation could lead to full system compromise or device restarts. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion. Cisco has not released software updates to address these vulnerabilities.