CVE-2019-1653— Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
Quick assessment
Affected
Cisco Cisco Small Business RV Series Router Firmware
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Small Business RV320和RV325都是美国思科（Cisco）公司的企业级路由器。 使用1.4.2.15版本至1.4.2.19版本固件的Cisco Small Business RV320和RV325中基于Web的管理界面存在信息泄露漏洞，该漏洞源于程序对URLs执行了错误的访问控制。远程攻击者可通过HTTP或HTTPS协议连接受影响的设备并请求URLs利用该漏洞检索敏感信息。
Public Exploits 5
Nuclei · 1
CVE-2019-1653.yaml [template]
In-the-Wild Activity Observed
cisa_kev · confirmed
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-1653
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
访问控制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Small Business RV320和RV325 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Small Business RV320和RV325都是美国思科（Cisco）公司的企业级路由器。 使用1.4.2.15版本至1.4.2.19版本固件的Cisco Small Business RV320和RV325中基于Web的管理界面存在信息泄露漏洞，该漏洞源于程序对URLs执行了错误的访问控制。远程攻击者可通过HTTP或HTTPS协议连接受影响的设备并请求URLs利用该漏洞检索敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Small Business RV Series Router Firmware | n/a | - |
|
II. Public POCs for CVE-2019-1653
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | NSE script to scan for Cisco routers vulnerable to CVE-2019-1653 | https://github.com/dubfr33/CVE-2019-1653 | POC Details |
| 2 | Just a PoC tool to extract password using CVE-2019-1653. | https://github.com/shaheemirza/CiscoSpill | POC Details |
| 3 | A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. | https://github.com/ibrahimzx/CVE-2019-1653 | POC Details |
| 4 | CiscoRV320Dump CVE-2019-1653 - Automatition. | https://github.com/elzerjp/nuclei-CiscoRV320Dump-CVE-2019-1653 | POC Details |
| 5 | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated remote attacker to retrieve sensitive information due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1653.yaml | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-1653
请登录查看更多情报信息。
Vendor Advisories for CVE-2019-1653 (2)
-
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-rv-info vendor-advisory x_refsource_CISCO
Exploits & Public PoCs for CVE-2019-1653 (5)
Mailing List Discussions for CVE-2019-1653 (4)
News Coverage for CVE-2019-1653 (1)
Other References for CVE-2019-1653 (3)
-
https://www.youtube.com/watch?v=bx0RQJDlGbY x_refsource_MISC
-
https://threatpost.com/scans-cisco-routers-code-execution/141218/ x_refsource_MISC
Same Patch Batch · Cisco · 2019-01-24 · 14 CVEs total
| CVE-2019-1652 | Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability | |
| CVE-2019-1655 | Cisco Webex Meetings Server Cross-Site Scripting Vulnerability | |
| CVE-2019-1656 | Cisco Enterprise NFV Infrastructure Software Linux Shell Access Vulnerability | |
| CVE-2019-1657 | Cisco AMP Threat Grid API Key Information Disclosure Vulnerability | |
| CVE-2019-1658 | Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability | |
| CVE-2019-1668 | Cisco SocialMiner Chat Feed Cross-Site Scripting Vulnerability | |
| CVE-2019-1669 | Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerabi | |
| CVE-2019-1645 | Cisco Connected Mobile Experiences Information Disclosure Vulnerability | |
| CVE-2019-1646 | Privilege Escalation Vulnerability in Cisco SD-WAN Solution | |
| CVE-2019-1647 | Cisco SD-WAN Solution Unauthorized Access Vulnerability | |
| CVE-2019-1648 | Cisco SD-WAN Solution Privilege Escalation Vulnerability | |
| CVE-2019-1650 | Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability | |
| CVE-2019-1651 | Cisco SD-WAN Solution Buffer Overflow Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Small Business RV Series Router Firmware
-
CVE-2020-3431
Cisco Small Business RV Series Routers Cross-Site Scripting -
CVE-2024-20524
Cisco Small Business RV042, RV042G, RV320, and RV325 Denial -
CVE-2024-20523
Cisco Small Business RV042, RV042G, RV320, and RV325 Denial -
CVE-2024-20522
Cisco Small Business RV042, RV042G, RV320, and RV325 Denial -
CVE-2024-20521
Cisco Small Business RV042, RV042G, RV320, and RV325 Remote
Same vendor: Cisco
-
CVE-2026-76504
Cisco Catalyst SD-WAN Manager System Account Authorization B -
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability
Same weakness: CWE-284
-
CVE-2026-103239
MISP Tag Collection Save Allows Privilege Escalation via Sib -
CVE-2026-92226
Joomla! Core - [20260913] - Core - Improper ACL checks for v -
CVE-2026-92223
Joomla! Core - [20260910] - Core - Improper ACL checks for w -
CVE-2026-90917
Joomla! Core - [20260907] - Core - Improper ACL checks in ou -
CVE-2026-90916
Joomla! Core - [20260906] - Core - Improper ACL checks in co
V. Comments for CVE-2019-1653
No comments yet