CVE-2019-1652 Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

🗓️ 24 Jan 2019 16:00:00Reported by ciscoType

Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerabilit

Reporter	Title	Published	Views	Family All 39
zdt	Cisco RV320 Command Injection Vulnerability	24 Jan 201900:00	–	zdt
zdt	Cisco RV320 Command Injection Vulnerability	27 Mar 201900:00	–	zdt
zdt	Cisco RV320 / RV325 Unauthenticated Remote Code Execution Exploit	30 Mar 201900:00	–	zdt
Tenable Nessus	Cisco RV320 < 1.4.2.22 Multiple Vulnerabilities	16 Apr 201900:00	–	nessus
Tenable Nessus	Cisco RV325 < 1.4.2.22 Multiple Vulnerabilities	16 Apr 201900:00	–	nessus
Tenable Nessus	Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability (cisco-sa-20190123-rv-info) (remote check)	25 Jan 201900:00	–	nessus
Tenable Nessus	Cisco Small Business RV320 and RV325 Routers Multiple Vulnerabilities (cisco-sa-20190123-rv-inject, cisco-sa-20190123-rv-info)	15 Apr 201900:00	–	nessus
GithubExploit	Exploit for Improper Input Validation in Cisco Rv320_Firmware	24 Jan 201910:12	–	githubexploit
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ICS	People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices	10 Jun 202212:00	–	ics

[
  {
    "product": "Cisco Small Business RV Series Router Firmware",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/bugtraq/2019/Mar/55
securityfocus	www.securityfocus.com/bid/106728
seclists	www.seclists.org/fulldisclosure/2019/Mar/61
exploit-db	www.exploit-db.com/exploits/46655/
exploit-db	www.exploit-db.com/exploits/46243/
packetstormsecurity	www.packetstormsecurity.com/files/152262/Cisco-RV320-Command-Injection.html
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-rv-inject
packetstormsecurity	www.packetstormsecurity.com/files/152305/Cisco-RV320-RV325-Unauthenticated-Remote-Code-Execution.html

03 Apr 2019 19:06Current

7.5High risk

Vulners AI Score7.5

CVSS 37.2

EPSS0.95923

CWE-20