Cisco has issued a security advisory urging their customers to patch Small Business RV series routers susceptible to exploitation by three (3) severe vulnerabilities, with two (2) of them having a CVSS score of 9.8 (critical), and one (1) having a score of 8.3 (high). According to Cisco, these flaws are dependent on one another, and the exploitation of one (1) of the vulnerabilities may be a prerequisite to exploiting one of the others. A Cisco spokesperson also stated that “…a software release that is affected by one of the vulnerabilities may not be affected by the other vulnerabilities.” The flaws are tracked as, CVE-2022-20827 (9.8), CVE-2022-20841 (9.8), and CVE-2022-20842 (8.3), and specifically affect the web-facing management interface, filter database, and Open Plug and Play (PnP) modules respectively. If exploited, these vulnerabilities could allow an unauthenticated remote attacker to inject and execute arbitrary code or induce denial-of-service (DoS) conditions in vulnerable routers, rendering them inoperable until the DoS attack is over. Although at this time there is no evidence of active exploitation of these vulnerabilities, a non-exhaustive Shodan search identified more than 12,000 Cisco web-management interfaces that are exposed to the public internet. Now that the vulnerabilities have become public, attackers will be looking to exploit devices that administrators are slow to update. These flaws affect the RV160, RV260, RV340, and RV345 Series Routers, and details can be found in the Cisco advisory linked below. There is no workaround to mitigate these vulnerabilities, and CTIX analysts urge all Cisco router users/administrators to upgrade to the latest stable version immediately to prevent exploitation.