CVE-2019-1652

🗓️ 24 Jan 2019 16:00:00Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 1136 Views🌐 WEB

Cisco RV320 and RV325 routers web management interface allows remote code execution

Reporter	Title	Published	Views	Family All 41
zdt	Cisco RV320 Command Injection Vulnerability	24 Jan 201900:00	–	zdt
zdt	Cisco RV320 Command Injection Vulnerability	27 Mar 201900:00	–	zdt
zdt	Cisco RV320 / RV325 Unauthenticated Remote Code Execution Exploit	30 Mar 201900:00	–	zdt
Tenable Nessus	Cisco RV320 < 1.4.2.22 Multiple Vulnerabilities	16 Apr 201900:00	–	nessus
Tenable Nessus	Cisco RV325 < 1.4.2.22 Multiple Vulnerabilities	16 Apr 201900:00	–	nessus
Tenable Nessus	Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability (cisco-sa-20190123-rv-info) (remote check)	25 Jan 201900:00	–	nessus
Tenable Nessus	Cisco Small Business RV320 and RV325 Routers Multiple Vulnerabilities (cisco-sa-20190123-rv-inject, cisco-sa-20190123-rv-info)	15 Apr 201900:00	–	nessus
GithubExploit	Exploit for Improper Input Validation in Cisco Rv320_Firmware	24 Jan 201910:12	–	githubexploit
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ICS	People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices	10 Jun 202212:00	–	ics

NVD

Node

AND

cisco rv320_firmwareRange1.4.2.15–1.4.2.22

cisco rv320Match-

Node

AND

cisco rv325_firmwareRange1.4.2.15–1.4.2.22

cisco rv325Match-

[
  {
    "product": "Cisco Small Business RV Series Router Firmware",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/bugtraq/2019/Mar/55
securityfocus	www.securityfocus.com/bid/106728
seclists	www.seclists.org/fulldisclosure/2019/Mar/61
exploit-db	www.exploit-db.com/exploits/46655/
exploit-db	www.exploit-db.com/exploits/46243/
packetstormsecurity	www.packetstormsecurity.com/files/152262/Cisco-RV320-Command-Injection.html
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-rv-inject
packetstormsecurity	www.packetstormsecurity.com/files/152305/Cisco-RV320-RV325-Unauthenticated-Remote-Code-Execution.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
common_name	request body	certificate_handle2.htm?type=4	Command injection via certificate generator by injecting shell commands through common_name in an authenticated web interface.	CWE-78
page	request body	certificate_handle2.htm?type=4	Command injection via certificate generator by injecting shell commands through common_name in an authenticated web interface.	CWE-78
totalRules	request body	certificate_handle2.htm?type=4	Command injection via certificate generator by injecting shell commands through common_name in an authenticated web interface.	CWE-78
OpenVPNRules	request body	certificate_handle2.htm?type=4	Command injection via certificate generator by injecting shell commands through common_name in an authenticated web interface.	CWE-78
SubmitStatus	request body	certificate_handle2.htm?type=4	Command injection via certificate generator by injecting shell commands through common_name in an authenticated web interface.	CWE-78
log_ch	request body	certificate_handle2.htm?type=4	Command injection via certificate generator by injecting shell commands through common_name in an authenticated web interface.	CWE-78
Country	request body	certificate_handle2.htm?type=4	Command injection via certificate generator by injecting shell commands through common_name in an authenticated web interface.	CWE-78
state	request body	certificate_handle2.htm?type=4	Command injection via certificate generator by injecting shell commands through common_name in an authenticated web interface.	CWE-78
locality	request body	certificate_handle2.htm?type=4	Command injection via certificate generator by injecting shell commands through common_name in an authenticated web interface.	CWE-78
organization	request body	certificate_handle2.htm?type=4	Command injection via certificate generator by injecting shell commands through common_name in an authenticated web interface.	CWE-78

17 Jun 2026 02:28Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.2

CVSS 29

CVSS 37.2

EPSS0.95923

SSVC

cisco rv320 rv325 web management remote code execution vulnerability cve-2019-1652 nvd