CVE-2019-1828 Cisco Small Business RV320 and RV325 Routers Weak Credential Encryption Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to access administrative credentials. The vulnerability exists because affected devices use weak encryption algorithms for use...

CVE-2019-1827

The CVE-2019-1827 issue affects Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers, specifically the Online Help web service. The vulnerability arises from insufficient validation of user-supplied input, enabling an unauthenticated, remote attacker to trigger a reflected cross-site...

CVE-2019-1827 Cisco Small Business RV320 and RV325 Routers Online Help Reflected Cross-Site Scripting Vulnerability

A vulnerability in the Online Help web service of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the service. The vulnerability exists because the Online Hel...

Cisco Small Business RV320 and RV325 Routers Online Help Reflected Cross-Site Scripting Vulnerability

A vulnerability in the Online Help web service of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the service. The vulnerability exists because the Online Hel...

Cisco RV320 and RV325 - Unauthenticated Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Cisco RV320 and RV325 Unauthenticated Remote Code Execution", 'Description' = %q This exploit module combines an information disclosure...

Cisco RV320 / RV325 Unauthenticated Remote Code Execution Exploit

This Metasploit module combines an information disclosure CVE-2019-1653 and a command injection vulnerability CVE-2019-1652 together to gain unauthenticated remote code execution on Cisco RV320 and RV325 small business routers. Can be exploited via the WAN interface of the router. Either via HTTP...

Cisco RV320 / RV325 Unauthenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Cisco RV320 and RV325 Unauthenticated Remote Code Execution", 'Description' = %q This exploit module combines an information disclosure...

Cisco Releases Flood of Patches for IOS XE, But Leaves Some Routers Open to Attack

UDPATE Cisco Systems issued 24 patches Wednesday tied to vulnerabilities in its IOS XE operating system and warned customers that two small business routers RV320 and RV325 are vulnerable to attack and that no patches are available for either. A total of 19 of the bugs were rated high severity by...

New Exploit Threatens Over 9,000 Hackable Cisco RV320/RV325 Routers Worldwide

If the connectivity and security of your organization rely on Cisco RV320 or RV325 Dual Gigabit WAN VPN routers, then you need to immediately install the latest firmware update released by the vendor last week. Cyber attackers have actively been exploiting two newly patched high-severity router...

The vulnerability of the web interface of the microprogramming software for Cisco Small Business RV320 and Cisco Small Business RV325 allows a hacker to disclose protected information.

The vulnerability of the web interfaces of Cisco Small Business RV320 and Cisco Small Business RV325 microprogramming software routers is related to deficiencies in access control to URL addresses. Exploiting this vulnerability can allow a malicious actor to disclose protected information using...

Cisco RV320 Command Injection (CVE-2019-1652)

A command injection vulnerability exists in Cisco RV320 and RV325 routers. An attacker can exploit this vulnerability by sending an authenticated HTTP request to the web-based management interface. An attacker could then gain the ability to arbitrarily execute code on the machine...

Cisco Small Business RV320 and RV325 Command Injection Vulnerabilities

The Cisco Small Business RV320 and RV325 are both enterprise-class routers from Cisco USA. A command injection vulnerability exists in the Cisco Small Business RV320 and RV325 with firmware versions 1.4.2.15 through 1.4.2.19. The vulnerability, which stems from the program failing to properly...

Cisco Small Business RV320 and RV325 Information Disclosure Vulnerabilities

The Cisco Small Business RV320 and RV325 are both enterprise-class routers from Cisco USA. An information disclosure vulnerability exists in the web-based management interface of the Cisco Small Business RV320 and RV325 using firmware versions 1.4.2.15 through 1.4.2.19. The vulnerability stems fr...

CVE-2019-1653

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit th...

CVE-2019-1652 Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vulnerability is due to improper...

CVE-2019-1652 Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vulnerability is due to improper...

CVE-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit th...

CVE-2019-1652

CVE-2019-1652 affects Cisco Small Business RV320/RV325 routers. The vulnerability is a command injection in the web-based management interface exploited via authenticated HTTP POST requests, allowing an admin-level attacker to execute commands as root on the underlying Linux shell. Public details...

CVE-2019-1653

CVE-2019-1653 affects Cisco Small Business RV320/RV325 routers. The web-based management interface has improper access controls on URLs, enabling an unauthenticated remote attacker to retrieve sensitive information such as configuration and diagnostics. Multiple connected sources corroborate an i...

CVE-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit th...