Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-20118: Cisco RV routers let remote admin take full control

CVE-2023-20118 · published 3 years ago · actively exploited

Summary

The web management page of Cisco Small Business RV series routers can be tricked by an attacker who has a valid login to run any command on the device. This could let the attacker gain full administrative rights and view or change data they shouldn't. Apply the latest firmware updates from Cisco as soon as possible and change default passwords.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
cisco	small business rv series routers	All versions
cisco	rv016_firmware	All versions `cpe:2.3:o:cisco:rv016_firmware::::::::`
cisco	rv042_firmware	All versions `cpe:2.3:o:cisco:rv042_firmware::::::::`
cisco	rv042g_firmware	All versions `cpe:2.3:o:cisco:rv042g_firmware::::::::`
cisco	rv082_firmware	All versions `cpe:2.3:o:cisco:rv082_firmware::::::::`
cisco	rv320_firmware	All versions `cpe:2.3:o:cisco:rv320_firmware::::::::`
cisco	rv325_firmware	All versions `cpe:2.3:o:cisco:rv325_firmware::::::::`

Original advisory text

Cisco Small Business RV Series Routers Command Injection Vulnerability

Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface. Successful exploitation could allow an authenticated, remote attacker to gain root-level privileges and access unauthorized data.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ci... Mitigation Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-... US Government Resource

Fix within

Internet-facing 3 days

and check for signs of compromise

Internal 14 days

Known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.2 High

Exploitation

Known exploited

Listed in the CISA KEV catalogue - exploitation confirmed in the wild.

54% chance of attack within 30 days

Type

CWE-77Command Injection

Timeline

Published13 Apr 2023

Updated30 Sep 2026

First seen6 Mar 2026

Sources

CVE-2023-20118 · CISA KEV

CVE-2023-20118 · NVD

Track software like this

Free during beta