CVE-2019-1653

Katalog CVE

CVSS 7.5 · High KEV · sudah dieksploitasi EPSS 99,9%

Kerentanan Improper Access Control pada cisco rv320 firmware, cisco rv325 firmware. Skor CVSS 3.1 7.5 (High) menurut NVD. Masuk katalog KEV CISA pada 3 November 2021, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.

Rincian

Terbit di NVD

24 Januari 2019

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

99,9% peluang dieksploitasi; lebih tinggi dari 99,9% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

Masuk KEV

3 November 2021

Tenggat CISA

3 Mei 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-rv-info advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1653 pemerintah AS
• http://packetstormsecurity.com/files/152260/Cisco-RV320-Unauthenticated-Configuration-Export.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/152261/Cisco-RV320-Unauthenticated-Diagnostic-Data-Retrieval.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/152305/Cisco-RV320-RV325-Unauthenticated-Remote-Code-Execution.html advisory pihak ketiga · vdb entry
• http://seclists.org/fulldisclosure/2019/Mar/59 exploit · mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2019/Mar/60 exploit · mailing list · advisory pihak ketiga
• http://www.securityfocus.com/bid/106732 advisory pihak ketiga · vdb entry
• https://badpackets.net/over-9000-cisco-rv320-rv325-routers-vulnerable-to-cve-2019-1653/ advisory pihak ketiga
• https://seclists.org/bugtraq/2019/Mar/53 mailing list · advisory pihak ketiga
• https://seclists.org/bugtraq/2019/Mar/54 mailing list · advisory pihak ketiga
• https://threatpost.com/scans-cisco-routers-code-execution/141218/ advisory pihak ketiga
• https://www.exploit-db.com/exploits/46262/ exploit · advisory pihak ketiga · vdb entry
• https://www.exploit-db.com/exploits/46655/ advisory pihak ketiga · vdb entry
• https://www.youtube.com/watch?v=bx0RQJDlGbY advisory pihak ketiga
• https://www.zdnet.com/article/hackers-are-going-after-cisco-rv320rv325-routers-using-a-new-exploit/ advisory pihak ketiga