Cisco · Small Business RV320 and RV325 Routers
CVE-2019-1653
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
ما هي
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.
CISA: Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.
ما العمل
Apply updates per vendor instructions.
الموعد النهائي للوكالات الفدرالية الأمريكية: 3 مايو 2022
- أُضيفت إلى قائمة CISA
- 3 نوفمبر 2021
- نُشرت
- 24 يناير 2019
- الخطورة
- مرتفع 7.5 CVSS 3.0
- احتمال الهجمات خلال الأيام الـ30 القادمة (EPSS)
- 99.9% ضمن أعلى 0.1% من كل الثغرات المعروفة
- نوع الضعف
- CWE-284
- تفاصيل أكثر
- NVD · CVE.org · CISA
كل المراجع (15)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-rv-info
- https://www.youtube.com/watch?v=bx0RQJDlGbY
- https://badpackets.net/over-9000-cisco-rv320-rv325-routers-vulnerable-to-cve-2019-1653/
- http://www.securityfocus.com/bid/106732
- https://www.exploit-db.com/exploits/46262/
- http://seclists.org/fulldisclosure/2019/Mar/60
- http://seclists.org/fulldisclosure/2019/Mar/59
- https://seclists.org/bugtraq/2019/Mar/54
- https://seclists.org/bugtraq/2019/Mar/53
- http://packetstormsecurity.com/files/152260/Cisco-RV320-Unauthenticated-Configuration-Export.html
- http://packetstormsecurity.com/files/152261/Cisco-RV320-Unauthenticated-Diagnostic-Data-Retrieval.html
- http://packetstormsecurity.com/files/152305/Cisco-RV320-RV325-Unauthenticated-Remote-Code-Execution.html
- https://www.exploit-db.com/exploits/46655/
- https://www.zdnet.com/article/hackers-are-going-after-cisco-rv320rv325-routers-using-a-new-exploit/
- https://threatpost.com/scans-cisco-routers-code-execution/141218/
ثغرات مُستغلّة أخرى من Cisco
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 14/10/2026 | Relative Path Traversal | Secure Email Gateway | حرجة 9.8 | 2.2% |
| 30/09/2026 | Hex Encoding | Catalyst SD-WAN Manager | حرجة 9.8 | 39% |
| 16/09/2026 | Incorrect Use of Privileged APIs | Identity Services Engine | حرجة 10.0 | 76% |
| 14/09/2026 | SQL Injection | Secure Email Gateway | حرجة 9.8 | 30% |
| 09/09/2026 | Firewall Management Center Authentication Bypass Using an Alternate Path or Channel | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | حرجة 10.0 | 88% |
| 11/08/2026 | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | مرتفع 8.6 | 1.0% |
| 29/07/2026 | Secure Firewall Management Center Use of Hard-coded Password | Secure Firewall Management Center (FMC) | متوسطة 5.3 | 35% |
| 13/07/2026 | Cross-Site Request Forgery | IOS | مرتفع 8.1 | 34% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.