---
id: "CVE-2019-1653"
kind: "vulnerability"
aliases: ["CVE-2019-1653"]
title: "Cisco Small Business RV320 and RV325 Routers: Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability"
severity: "high"
cvss: 7.5
epss: 0.99876
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Cisco Small Business RV320 and RV325 Routers", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["cisco", "exploited", "infrastructure", "rv320", "rv325", "self-hosted", "small-business"]
not_affected_if: ["default-config"]
published_at: "2019-01-24T16:29:00+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1653", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1653", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1653", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Cisco Small Business RV320 and RV325 Routers: Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

Cisco RV320 and RV325 small business VPN routers expose an improper URL access control that lets an unauthenticated attacker download the router configuration or detailed diagnostic information. The exposed configuration can contain credentials and network details that help an attacker move further into the network.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Cisco Small Business RV320 and RV325 Routers affected ? fixed ?

## How to check

Log in to the router admin interface and check the firmware version under System Configuration or Status.

## Fix

Apply the Cisco firmware update per the vendor advisory; CISA's required action is 'Apply updates per vendor instructions'.

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1653
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2019-1653
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2019-1653

## From the sources

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_