Cisco · Small Business RV320 and RV325 Routers
CVE-2019-1653
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
무엇인가
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.
CISA: Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.
할 일
Apply updates per vendor instructions.
미국 연방 기관 조치 기한: 2022년 5월 3일
- CISA 목록에 추가됨
- 2021년 11월 3일
- 게시됨
- 2019년 1월 24일
- 심각도
- 높음 7.5 CVSS 3.0
- 향후 30일 내 공격 가능성(EPSS)
- 99.9% 알려진 모든 취약점 중 상위 0.1%
- 약점 유형
- CWE-284
- 자세히
- NVD · CVE.org · CISA
모든 참고 자료(15)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-rv-info
- https://www.youtube.com/watch?v=bx0RQJDlGbY
- https://badpackets.net/over-9000-cisco-rv320-rv325-routers-vulnerable-to-cve-2019-1653/
- http://www.securityfocus.com/bid/106732
- https://www.exploit-db.com/exploits/46262/
- http://seclists.org/fulldisclosure/2019/Mar/60
- http://seclists.org/fulldisclosure/2019/Mar/59
- https://seclists.org/bugtraq/2019/Mar/54
- https://seclists.org/bugtraq/2019/Mar/53
- http://packetstormsecurity.com/files/152260/Cisco-RV320-Unauthenticated-Configuration-Export.html
- http://packetstormsecurity.com/files/152261/Cisco-RV320-Unauthenticated-Diagnostic-Data-Retrieval.html
- http://packetstormsecurity.com/files/152305/Cisco-RV320-RV325-Unauthenticated-Remote-Code-Execution.html
- https://www.exploit-db.com/exploits/46655/
- https://www.zdnet.com/article/hackers-are-going-after-cisco-rv320rv325-routers-using-a-new-exploit/
- https://threatpost.com/scans-cisco-routers-code-execution/141218/
Cisco의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 10. 14. | Relative Path Traversal | Secure Email Gateway | 치명적 9.8 | 2.2% |
| 2026. 9. 30. | Hex Encoding | Catalyst SD-WAN Manager | 치명적 9.8 | 39% |
| 2026. 9. 16. | Incorrect Use of Privileged APIs | Identity Services Engine | 치명적 10.0 | 76% |
| 2026. 9. 14. | SQL Injection | Secure Email Gateway | 치명적 9.8 | 30% |
| 2026. 9. 9. | Firewall Management Center Authentication Bypass Using an Alternate Path or Channel | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 치명적 10.0 | 88% |
| 2026. 8. 11. | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 높음 8.6 | 1.0% |
| 2026. 7. 29. | Secure Firewall Management Center Use of Hard-coded Password | Secure Firewall Management Center (FMC) | 보통 5.3 | 35% |
| 2026. 7. 13. | Cross-Site Request Forgery | IOS | 높음 8.1 | 34% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.