7.2 Élevée Exploitée

CVE-2019-1652 Cisco Small Business Routers Improper Input Validation Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply updates per vendor instructions.

Campagnes de rançongiciel Non constatée à ce jour

Faiblesse CWE-20

Description

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious HTTP POST requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux shell as root. Cisco has released firmware updates that address this vulnerability.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Small Business RV Series Router Firmware	Versions non publiées

Références

20190123 Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability tools.cisco.com
46243 www.exploit-db.com
106728 www.securityfocus.com
20190327 [RT-SA-2019-005] Cisco RV320 Command Injection Retrieval seclists.org
20190327 [RT-SA-2019-005] Cisco RV320 Command Injection Retrieval seclists.org
packetstormsecurity.com packetstormsecurity.com
packetstormsecurity.com packetstormsecurity.com
46655 www.exploit-db.com

Chronologie

Publiée 24 janvier 2019
Ajoutée au catalogue KEV 3 mars 2022
Dernière modification 21 octobre 2025

Les 262 CVE de Cisco Small Business RV Series Router Firmware →

CVE-2020-3431 A vulnerability in the web-based management interface of Cisco Small Business RV042 Dual WAN VPN Routers and… 6.1 Moyenne CVE-2024-20524 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers… 6.8 Moyenne CVE-2024-20523 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers… 6.8 Moyenne CVE-2024-20522 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers… 6.5 Moyenne

Suivre cette CVE