Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability (Cisco Cisco Small Business RV Series Router Firmware)
At a glance
- Source
- NVD
- EPSS
- EPSS 99.88 % · percentile 100 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- cisco
- NVD status
- Analyzed
Description
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.
Weaknesses (CWE)
- CWE-284 — Improper Access Control
References
- https://www.youtube.com/watch?v=bx0RQJDlGbY
- https://badpackets.net/over-9000-cisco-rv320-rv325-routers-vulnerable-to-cve-2019-1653/
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-rv-info
- http://www.securityfocus.com/bid/106732
- https://www.exploit-db.com/exploits/46262/
- http://seclists.org/fulldisclosure/2019/Mar/60
- http://seclists.org/fulldisclosure/2019/Mar/59
- https://seclists.org/bugtraq/2019/Mar/54
- https://seclists.org/bugtraq/2019/Mar/53
- http://packetstormsecurity.com/files/152260/Cisco-RV320-Unauthenticated-Configuration-Export.html
- http://packetstormsecurity.com/files/152261/Cisco-RV320-Unauthenticated-Diagnostic-Data-Retrieval.html
- http://packetstormsecurity.com/files/152305/Cisco-RV320-RV325-Unauthenticated-Remote-Code-Execution.html
- https://www.exploit-db.com/exploits/46655/
- https://www.zdnet.com/article/hackers-are-going-after-cisco-rv320rv325-routers-using-a-new-exploit/
- https://threatpost.com/scans-cisco-routers-code-execution/141218/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1653
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.0 | HIGH 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | cisco |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | NVD · nvd@nist.gov (Primary) |
| CVSS 3.0 | HIGH 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | NVD · psirt@cisco.com (Secondary) |
| CVSS 2.0 | MEDIUM 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2019-10210
- GCVE · GCVE-0-2019-1653
CERT-FR advisories
- CERTFR-2019-AVI-034 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:cisco:rv320_firmware:1.4.2.15:*:*:*:*:*:*:*cpe:2.3:o:cisco:rv320_firmware:1.4.2.17:*:*:*:*:*:*:*cpe:2.3:o:cisco:rv325_firmware:1.4.2.15:*:*:*:*:*:*:*cpe:2.3:o:cisco:rv325_firmware:1.4.2.17:*:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Cisco · Cisco Small Business RV Series Router Firmware | affected n/a |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| CISA Known Exploited Vulnerabilities | CC0 1.0 |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |