7.5
Élevée
Exploitée
CVE-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-284
Description
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Small Business RV Series Router Firmware | Versions non publiées |
Références
- www.youtube.com www.youtube.com
- badpackets.net badpackets.net
- 20190123 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability tools.cisco.com
- 106732 www.securityfocus.com
- 46262 www.exploit-db.com
- 20190327 [RT-SA-2019-004] Cisco RV320 Unauthenticated Diagnostic Data Retrieval seclists.org
- 20190327 [RT-SA-2019-003] Cisco RV320 Unauthenticated Configuration Export seclists.org
- 20190327 [RT-SA-2019-004] Cisco RV320 Unauthenticated Diagnostic Data Retrieval seclists.org
- 20190327 [RT-SA-2019-003] Cisco RV320 Unauthenticated Configuration Export seclists.org
- packetstormsecurity.com packetstormsecurity.com
- packetstormsecurity.com packetstormsecurity.com
- packetstormsecurity.com packetstormsecurity.com
- 46655 www.exploit-db.com
- www.zdnet.com www.zdnet.com
- threatpost.com threatpost.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Cisco Small Business RV Series Router Firmware
Les 262 CVE de Cisco Small Business RV Series Router Firmware →
CVE-2020-3431
A vulnerability in the web-based management interface of Cisco Small Business RV042 Dual WAN VPN Routers and…
6.1
Moyenne
CVE-2024-20524
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers…
6.8
Moyenne
CVE-2024-20523
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers…
6.8
Moyenne
CVE-2024-20522
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers…
6.5
Moyenne