CVE detail
CVE-2019-1653 — Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
Published 2021-11-03 · Modified 2021-11-03 · Source kev
HIGH
severity
CVSS-derived band
0.9988
EPSS probability
exploitation probability, 30d
100.0%
EPSS percentile
percentile vs all CVEs
LISTED
CISA KEV
due 2022-05-03
⚠ Actively exploited in the wild — CISA KEV listed 2021-11-03, federal remediation due 2022-05-03.
Description
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References