CVE-2023-20073
CVSS v3
9.8
CRITICAL
EPSS Score
90.1 %
exploit probability, as of 2026-10-05
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement mechanisms in the context of file uploads. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to upload arbitrary files to the affected device.
Technical details
- Published
- 2023-04-05
Frequently asked questions
What is CVE-2023-20073?
A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement mechanisms in the context of file uploads. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to upload arbitrary files to the affected device.
Is CVE-2023-20073 actively exploited?
Active exploitation of CVE-2023-20073 has not been confirmed. Its EPSS score was 90.1% on 2026-10-05, the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2023-20073?
CVE-2023-20073 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Is CVE-2023-20073 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 50 free checks/month · Free API key
Other 2023 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).