Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability (cisco-sa-20190123-rv-info) (remote check)
high Nessus Plugin ID 121395
Language:
New! Plugin Severity Now Using CVSS v3
The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Synopsis
The remote device is affected by an information disclosure vulnerability.Description
The remote Cisco Small Business router is affected by a remote information disclosure vulnerability. A remote, unauthenticated attacker can exploit this, via a simple HTTP GET or POST request, to obtain the configuration of the router. This configuration includes device credentials in the form of a plaintext username and an MD5 hashed password that is trivial to crack.These credentials could then be used to authenticate to the router and can be leveraged with a command injection vulnerability (CVE-2019-1652) to allow an attacker to execute arbitrary commands.
Solution
Refer to Cisco bug ID CSCvg85922 for any available patches, or contact the vendor for a fix.See Also
http://www.nessus.org/u?2764da3f
http://www.nessus.org/u?f0f4af0a
Plugin Details
Severity: High
ID: 121395
File Name: cisco-sa-20190123-rv-info_direct.nasl
Version: 1.12
Type: remote
Family: CGI abuses
Published: 1/25/2019
Updated: 11/30/2021
Dependencies: http_version.nasl
Risk Information
CVSS Score Source: CVE-2019-1653
VPR
Risk Factor: High
Score: 7.2
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.1
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Temporal Vector: E:F/RL:OF/RC:C
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Temporal Vector: E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/h:cisco:rv320_dual_gigabit_wan_vpn_router, cpe:/h:cisco:rv320_dual_gigabit_wan_wf_vpn_router, cpe:/h:cisco:rv325_dual_gigabit_wan_vpn_router, cpe:/h:cisco:rv325_dual_gigabit_wan_wf_vpn_router
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Patch Publication Date: 1/23/2019
Vulnerability Publication Date: 1/23/2019
Exploitable With
Metasploit (Cisco RV320 and RV325 Unauthenticated Remote Code Execution)
Reference Information
CVE: CVE-2019-1653
BID: 106732