A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.

According to its self-reported version, this Cisco Small Business RV320 router is affected by multiple vulnerabilities:

 - A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands.The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious HTTP POST requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux shell as root. (CVE-2019-1652)
 - A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information.The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. (CVE-2019-1653)

According to its self-reported version, this Cisco Small Business RV Series router is affected by multiple vulnerabilities:

  - A vulnerability in the web-based management interface of     Cisco Small Business RV320 and RV325 Dual Gigabit WAN     VPN Routers could allow an authenticated, remote     attacker with administrative privileges on an affected     device to execute arbitrary commands.The vulnerability     is due to improper validation of user-supplied input. An     attacker could exploit this vulnerability by sending     malicious HTTP POST requests to the web-based management     interface of an affected device. A successful exploit     could allow the attacker to execute arbitrary commands     on the underlying Linux shell as root. (CVE-2019-1652)

  - A vulnerability in the web-based management interface of     Cisco Small Business RV320 and RV325 Dual Gigabit WAN     VPN Routers could allow an unauthenticated, remote     attacker to retrieve sensitive information.The     vulnerability is due to improper access controls for     URLs. An attacker could exploit this vulnerability by     connecting to an affected device via HTTP or HTTPS and     requesting specific URLs. A successful exploit could     allow the attacker to download the router configuration     or detailed diagnostic information. (CVE-2019-1653)

Please see the included Cisco BIDs and Cisco Security Advisory for more information

The remote Cisco Small Business router is affected by a remote information disclosure vulnerability. A remote, unauthenticated attacker can exploit this, via a simple HTTP GET or POST request, to obtain the configuration of the router. This configuration includes device credentials in the form of a plaintext username and an MD5 hashed password that is trivial to crack.

These credentials could then be used to authenticate to the router and can be leveraged with a command injection vulnerability (CVE-2019-1652) to allow an attacker to execute arbitrary commands.

ID	Name	Product	Family	Severity
700567	Cisco RV325 < 1.4.2.22 Multiple Vulnerabilities	Nessus Network Monitor	SNMP	high
700566	Cisco RV320 < 1.4.2.22 Multiple Vulnerabilities	Nessus Network Monitor	SNMP	high
124060	Cisco Small Business RV320 and RV325 Routers Multiple Vulnerabilities (cisco-sa-20190123-rv-inject, cisco-sa-20190123-rv-info)	Nessus	CISCO	high
121395	Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability (cisco-sa-20190123-rv-info) (remote check)	Nessus	CGI abuses	high

Detections

Analytics

CVE-2019-1653

high

Tenable Plugins

high

high

high

high