Live › vulnerability › CVE-2019-1653
Go to dashboardCisco RV320 and RV325 small business VPN routers expose an improper URL access control that lets an unauthenticated attacker download the router configuration or detailed diagnostic information. The exposed configuration can contain credentials and network details that help an attacker move further into the network.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco Small Business RV320 and RV325 Routers | vendor | – | – |
Log in to the router admin interface and check the firmware version under System Configuration or Status.
Apply the Cisco firmware update per the vendor advisory; CISAs required action is Apply updates per vendor instructions'.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.
This page as .md · .json · in your agent: get_signal("CVE-2019-1653")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.