CVE Record
[ HIGH ]CVE-2019-1653
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.
- Vendor
- Cisco
- Product
- Small Business RV320 and RV325 Routers
- CVSS
- 7.5
- EPSS (exploit probability)
- 99.9%
- Status
- kev
- CISA patch-by (BOD 22-01)
- Published
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.
Added to CISA’s Known Exploited Vulnerabilities catalog on 2021-11-03. Required action per CISA: Apply updates per vendor instructions. Due date: 2022-05-03.
This is an auto-synced KEV catalog record pending a full 0dayNews write-up — see CISA’s KEV catalog and the NVD record linked above for primary sources.