Cisco · Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
CVE-2019-1652
Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability
무엇인가
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious HTTP POST requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux shell as root. Cisco has released firmware updates that address this vulnerability.
CISA: A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands.
할 일
Apply updates per vendor instructions.
미국 연방 기관 조치 기한: 2022년 3월 17일
- CISA 목록에 추가됨
- 2022년 3월 3일
- 게시됨
- 2019년 1월 24일
- 심각도
- 높음 7.2 CVSS 3.0
- 향후 30일 내 공격 가능성(EPSS)
- 96% 알려진 모든 취약점 중 상위 0.1%
- 약점 유형
- CWE-20
- 자세히
- NVD · CVE.org · CISA
모든 참고 자료(8)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-rv-inject
- https://www.exploit-db.com/exploits/46243/
- http://www.securityfocus.com/bid/106728
- http://seclists.org/fulldisclosure/2019/Mar/61
- https://seclists.org/bugtraq/2019/Mar/55
- http://packetstormsecurity.com/files/152262/Cisco-RV320-Command-Injection.html
- http://packetstormsecurity.com/files/152305/Cisco-RV320-RV325-Unauthenticated-Remote-Code-Execution.html
- https://www.exploit-db.com/exploits/46655/
Cisco의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 10. 14. | Relative Path Traversal | Secure Email Gateway | 치명적 9.8 | 2.2% |
| 2026. 9. 30. | Hex Encoding | Catalyst SD-WAN Manager | 치명적 9.8 | 39% |
| 2026. 9. 16. | Incorrect Use of Privileged APIs | Identity Services Engine | 치명적 10.0 | 76% |
| 2026. 9. 14. | SQL Injection | Secure Email Gateway | 치명적 9.8 | 30% |
| 2026. 9. 9. | Firewall Management Center Authentication Bypass Using an Alternate Path or Channel | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 치명적 10.0 | 88% |
| 2026. 8. 11. | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 높음 8.6 | 1.0% |
| 2026. 7. 29. | Secure Firewall Management Center Use of Hard-coded Password | Secure Firewall Management Center (FMC) | 보통 5.3 | 35% |
| 2026. 7. 13. | Cross-Site Request Forgery | IOS | 높음 8.1 | 34% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.