PT-2019-1227 · Cisco · Cisco Small Business Rv325+1

Published 2019-01-23 · Updated 2026-03-10 · CVE-2019-1653

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers (affected versions not specified)

Description A vulnerability in the web-based management interface of the routers could allow an unauthenticated, remote attacker to retrieve sensitive information due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs, potentially allowing them to download the router configuration or detailed diagnostic information.

Recommendations For Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers, update to the latest firmware version released by Cisco to address this vulnerability. As a temporary workaround, consider restricting access to the web-based management interface until a patch is applied. Avoid using HTTP or HTTPS to connect to the device until the issue is resolved, if possible. At the moment, there is no information about specific steps to mitigate the vulnerability beyond updating the firmware.

Exploit

Fix

Improper Access Control

Information Disclosure

Weakness Enumeration

CWE-284

CWE-200

Related Identifiers

BDU:2019-00340

CVE-2019-1653

Affected Products

Cisco Small Business Rv320

Cisco Small Business Rv325

References · 27

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cisco_rv32x_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/cisco_rv320_config.rb · Exploit
• 🔥 https://github.com/shaheemirza/CiscoSpill · Exploit
• 🔥 https://exploit-db.com/exploits/46262 · Exploit
• 🔥 https://exploit-db.com/exploits/46655 · Exploit
• 🔥 http://packetstormsecurity.com/files/152260/Cisco-RV320-Unauthenticated-Configuration-Export.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2019/Mar/59 · Exploit
• 🔥 http://packetstormsecurity.com/files/152261/Cisco-RV320-Unauthenticated-Diagnostic-Data-Retrieval.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2019/Mar/60 · Exploit
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-rv-info · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1653 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1653 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00340 · Security Note
• https://twitter.com/ravirockks/status/1745598040487112919 · Twitter Post
• https://seclists.org/bugtraq/2019/Mar/54 · Note