CVE-2019-1653
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
- State
- Published
- Severity
- 7.5 High
- Published
- Jan 24, 2019
- Updated
- Oct 21, 2025
- Reserved
- Dec 6, 2018
Description
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 7.5 High | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco Small Business RV Series Router FirmwareCisco |
|
References
- https://www.youtube.com/watch?v=bx0RQJDlGbY
- https://badpackets.net/over-9000-cisco-rv320-rv325-routers-vulnerable-to-cve-2019-1653/
- 20190123 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerabilityvendor-advisory
- 106732vdb-entry
- 46262exploit
- 20190327 [RT-SA-2019-004] Cisco RV320 Unauthenticated Diagnostic Data Retrievalmailing-list
- 20190327 [RT-SA-2019-003] Cisco RV320 Unauthenticated Configuration Exportmailing-list
- 20190327 [RT-SA-2019-004] Cisco RV320 Unauthenticated Diagnostic Data Retrievalmailing-list
- 20190327 [RT-SA-2019-003] Cisco RV320 Unauthenticated Configuration Exportmailing-list
- http://packetstormsecurity.com/files/152260/Cisco-RV320-Unauthenticated-Configuration-Export.html
- http://packetstormsecurity.com/files/152261/Cisco-RV320-Unauthenticated-Diagnostic-Data-Retrieval.html
- http://packetstormsecurity.com/files/152305/Cisco-RV320-RV325-Unauthenticated-Remote-Code-Execution.html
- 46655exploit
- https://www.zdnet.com/article/hackers-are-going-after-cisco-rv320rv325-routers-using-a-new-exploit/
- https://threatpost.com/scans-cisco-routers-code-execution/141218/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1653government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.