CVE-2020-3274

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands on an affected device. The vulnerabilities exist because the web-based management interface does not properly validate user-supplied input to scripts. An attacker with administrative privileges that are sufficient to log in to the web-based management interface could exploit each vulnerability by sending malicious requests to an affected device. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system.

• CWE-77
• CWE-78

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-routers-Rj5JRfF8Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-routers-Rj5JRfF8Vendor Advisory

Published

Jun 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3266A vulnerability in the CLI of Cisco SD-WAN Solution software…7.8
• CVE-2020-3267A vulnerability in the API subsystem of Cisco Unified Contac…7.1
• CVE-2020-3268Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2020-3269Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2020-3272A vulnerability in the DHCP server of Cisco Prime Network Re…7.5
• CVE-2020-3273A vulnerability in the 802.11 Generic Advertisement Service …7.5
• CVE-2020-3275Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2020-3276Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2020-3277Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2020-3278Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2020-3279Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2020-3280A vulnerability in the Java Remote Management Interface of C…9.8