Live › vulnerability › CVE-2019-1652
Go to dashboardCisco RV320 and RV325 VPN routers have an input validation flaw in their web management interface that lets a remote attacker run arbitrary commands on the device. The flaw is listed in CISA's Known Exploited Vulnerabilities catalog, so attacks are happening in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | vendor | – | – |
Check the router firmware version in the web admin UI (Status or System Summary) or with the routers CLI show version; compare it with the fixed release in Ciscos advisory.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious HTTP POST requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux shell as root. Cisco has released firmware updates that address this vulnerability.
This page as .md · .json · in your agent: get_signal("CVE-2019-1652")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.