H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2019-1653

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.

Vulnerability
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03

Confidence

—

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.

Labels

exploitedkev

CISA KEV context

Vendor / productCisco Small Business RV320 and RV325 Routers
Added2021-11-03
Due date2022-05-03
18 recorded

Relationships

mitigates
from Remediate CVE-2019-1653
Mitigation
related-to
to Add Malicious File to Shared Webroot
Technique
related-to
to Data Injected During Configuration
Technique
related-to
to Disable Security Software
Technique
related-to
to Embedding Scripts within Scripts
Technique
related-to
to Incomplete Data Deletion in a Multi-Tenant Environment
Technique
related-to
to Install New Service
Technique
related-to
to Install Rootkit
Technique
related-to
to Intent Spoof
Technique
related-to
to Malicious Logic Insertion
Technique
related-to
to Malicious Root Certificate
Technique
related-to
to Modification of Windows Service Configuration
Technique
related-to
to Modify Existing Service
Technique
related-to
to Modify Shared File
Technique
related-to
to Replace File Extension Handlers
Technique
related-to
to Replace Trusted Executable
Technique
related-to
to Run Software at Logon
Technique
related-to
to WebView Exposure
Technique
2 external

References

nvd
CVE-2019-1653
open
cwe
CWE-284
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance