CVE-2019-1653
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
Published Jan 24, 2019 · updated Jun 16, 2026 · cisco rv320 firmware
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.
Timeline
Detection, updates, and resolution for this record.
Jan 24, 2019 · Catalog
Detected
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A
Nov 3, 2021 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 3, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A
Required action
Apply updates per vendor instructions.
CISA due date May 3, 2022
Affected
- cpe cisco/rv320 firmware1.4.2.15
- cpe cisco/rv320 firmware1.4.2.17
- cpe cisco/rv325 firmware1.4.2.15
- cpe cisco/rv325 firmware1.4.2.17
- vendor Cisco Small Business RV320 and RV325 Routersversion unspecified
Sources
- CISA KEVCVE-2019-1653
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.
cisa.gov - CVE.orgCVE-2019-1653
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-1653
30-day exploitation probability 99.9%
first.org - Exploit Database46262
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database46655
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesauxiliary_gather/cisco_rv320_config
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - Metasploit Modulesexploit_linux/http/cisco_rv32x_rce
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2019-1653
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker
nvd.nist.gov - Packet Storm Securityhttp://packetstormsecurity.com/files/152260/Cisco-RV320-Unauthenticated-Configuration-Export.html
Packet Storm link already published on the finding.
packetstormsecurity.com - Packet Storm Securityhttp://packetstormsecurity.com/files/152261/Cisco-RV320-Unauthenticated-Diagnostic-Data-Retrieval.html
Packet Storm link already published on the finding.
packetstormsecurity.com - Packet Storm Securityhttp://packetstormsecurity.com/files/152305/Cisco-RV320-RV325-Unauthenticated-Remote-Code-Execution.html
Packet Storm link already published on the finding.
packetstormsecurity.com