CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Mar 24, 2025

CVE-2023-20118

High

EPSS 3.4%CISA KEV

Cisco/Small Business RV Series Routers

Description

Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface. Successful exploitation could allow an authenticated, remote attacker to gain root-level privileges and access unauthorized data.

EPSS — Exploit Probability

3.4%

Higher than 87.2% of all CVEs

Required Action

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 ; https://nvd.nist.gov/vuln/detail/CVE-2023-20118

Risk Assessment

ELEVATED

In CISA KEV

Details

Severity: High
EPSS: 3.4%
CISA KEV: Yes
Ransomware: Unknown
Articles: 0

Timeline

Published

Mar 3, 2025

Added to KEV

Mar 3, 2025

Remediation Due

Mar 24, 2025

Affected Product

Cisco

Small Business RV Series Routers

View all Cisco CVEs

External Links

NVD (NIST)CVE Details MITRE CVE