CVE-2019-1653highunder attackCWE-284

CVE-2019-1653: high-severity vulnerability in Cisco Small Business RV Series Router Firmware

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

Published · Updated

Follow this CVE+ Monitor Cisco Small Business RV Series Router+ Monitor Small Business RV320 and RV325 Routers

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.5epss 100%
from disclosure to weaponsame day
Published on NVDJan 24
1st PoCJan 24
metasploitSep 9
CISA KEV+1014d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

The Cisco Small Business RV320 and RV325 routers have a flaw that allows attackers to access sensitive information like router settings and diagnostic data without needing a password. An attacker can simply visit specific web pages to download this confidential information.

Technical detail

An improper access control vulnerability in the web management interface allows unauthenticated remote attackers to retrieve sensitive configuration and diagnostic data by sending HTTP/HTTPS requests to unprotected URLs. The vulnerability requires network access to the management interface but no authentication, enabling unauthorized disclosure of router configuration files.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Cisco · Cisco Small Business RV Series Router Firmware
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Cisco Small Business RV Series Router Firmware

In the same product, most dangerous first.

CVE-2019-1652HIGHCisco Small Business RV320 and RV325 Routers Command Injection VulnerabilityEPSS 95.9%KEVCVE-2022-20699CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 72.5%KEVCVE-2023-20118MEDIUMCVE-2023-20118EPSS 54.1%KEVCVE-2022-20708CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 14.9%KEVCVE-2022-20701CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 9.7%KEVCVE-2022-20703CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 9.2%KEV