CVE-2019-1898

🗓️ 20 Jun 2019 03:05:15Reported by ciscoType

A vulnerability in web-based management interface of Cisco RV routers allows unauthenticated remote access to syslog file

Reporter	Title	Published	Views	Family All 9
Cisco	Cisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability	19 Jun 201916:00	–	cisco
Tenable Nessus	Cisco RV110W, RV130W, and RV215W Routers Syslog HTTP Access Information Disclosure Vulnerability (cisco-sa-20190619-rv-fileaccess)	19 Jun 201900:00	–	nessus
Tenable Nessus	Cisco RV110W, RV130W, and RV215W Routers Syslog Disclosure (cisco-sa-20190619-rv-fileaccess)	19 Jun 201900:00	–	nessus
CNVD	Cisco RV110W, RV130W, and RV215W Authorization Issues Vulnerabilities	21 Jun 201900:00	–	cnvd
Cvelist	CVE-2019-1898 Cisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability	20 Jun 201903:05	–	cvelist
Nuclei	Cisco RV110W RV130W RV215W Router - Information leakage	3 Jun 202606:04	–	nuclei
NVD	CVE-2019-1898	20 Jun 201903:15	–	nvd
Prion	Authorization	20 Jun 201903:15	–	prion
Vulnrichment	CVE-2019-1898 Cisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability	20 Jun 201903:05	–	vulnrichment

NVD

Node

cisco rv110w_firmwareMatch-

AND

cisco rv110wMatch-

Node

cisco rv130w_firmwareMatch-

AND

cisco rv130wMatch-

Node

cisco rv215w_firmwareMatch-

AND

cisco rv215wMatch-

[
  {
    "product": "Cisco RV130W Wireless-N Multifunction VPN Router Firmware",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "1.0.3.51",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2019-29
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-rv-fileaccess
securityfocus	www.securityfocus.com/bid/108865

21 Nov 2024 04:37Current

5.1Medium risk

Vulners AI Score5.1

CVSS 25

CVSS 3.15.3

CVSS 35.3

EPSS0.78679

SSVC