Vendor / Project: Cisco Product: Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Description: A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. Required Action: Apply updates per vendor instructions. Due Date: 2022-03-17 Ransomware Campaign Use: Unknown CWEs: CWE-20 Notes: https://nvd.nist.gov/vuln/detail/CVE-2019-1652
CVE-2019-1652 — Cisco Small Business Routers Improper Input Validation Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-03-03 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 7.2
- Quelle-ID:
cisa_kev - uid_hash:
beae37e7ac56054eb66d0898d5b34e1d4ebc0571db1f3a0fe185e7fdb1666257
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
7.2 |
HIGH |
7.2 |
2019-01-24 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |