Detections
Analytics
Cisco RV325 < 1.4.2.22 Multiple Vulnerabilities
high Nessus Network Monitor Plugin ID 700567
Synopsis
The remote host is a Cisco RV325 device that is affected by multiple vulnerabilities.Description
According to its self-reported version, this Cisco Small Business RV320 router is affected by multiple vulnerabilities:- A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands.The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious HTTP POST requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux shell as root. (CVE-2019-1652)
- A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information.The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. (CVE-2019-1653)
Solution
Upgrade to Cisco RV325 version 1.4.2.22 or later.See Also
http://www.nessus.org/u?f54bf7af
http://www.nessus.org/u?2764da3f
Plugin Details
Severity: High
ID: 700567
Family: SNMP
Published: 4/16/2019
Updated: 4/16/2019
Nessus ID: 124060
Risk Information
VPR
Risk Factor: High
Score: 8.4
CVSS v2
Risk Factor: High
Base Score: 9
Temporal Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 7.2
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/h:cisco:rv325
Patch Publication Date: 1/24/2019
Vulnerability Publication Date: 1/23/2019
Reference Information
CVE: CVE-2019-1652, CVE-2019-1653
BID: 106728