CVE-2019-1653

KEV

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

Vendor / Project: Cisco
Product: Small Business RV320 and RV325 Routers
Date added: Nov 3, 2021
Due date: May 3, 2022
Known ransomware use: Unknown
CWEs: CWE-284

Description

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-1653