CVE-2019-1652

CVE	CVE-2019-1652
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2019-01-24 15:29:00 UTC
Updated	2020-10-05 19:34:00 UTC
Description	A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious HTTP POST requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux shell as root. Cisco has released firmware updates that address this vulnerability.

EPSS: 0.927270000 probability, percentile 0.997600000 (date 2026-05-15)

CISA KEV: Listed on 2022-03-03; due 2022-03-17; ransomware use Unknown

Problem Types: CWE-78

Vendor	Cisco
Product	Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
Name	Cisco Small Business Routers Improper Input Validation Vulnerability
Required Action	Apply updates per vendor instructions.
Notes	https://nvd.nist.gov/vuln/detail/CVE-2019-1652

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Cisco	Rv320	-	All	All	All
Hardware	Cisco	Rv320	-	All	All	All
Operating System	Cisco	Rv320 Firmware	1.4.2.15	All	All	All
Operating System	Cisco	Rv320 Firmware	1.4.2.15	All	All	All
Hardware	Cisco	Rv325	-	All	All	All
Hardware	Cisco	Rv325	-	All	All	All
Operating System	Cisco	Rv325 Firmware	1.4.2.15	All	All	All
Operating System	Cisco	Rv325 Firmware	1.4.2.15	All	All	All

Reference	Source	Link	Tags
Cisco RV320 and RV325 - Unauthenticated Remote Code Execution (Metasploit) - Hardware remote Exploit	EXPLOIT-DB	www.exploit-db.com	Exploit, Third Party Advisory, VDB Entry
Cisco RV320 / RV325 Unauthenticated Remote Code Execution ≈ Packet Storm	MISC	packetstormsecurity.com	Third Party Advisory, VDB Entry
Cisco RV320 Command Injection ≈ Packet Storm	MISC	packetstormsecurity.com	Exploit, Third Party Advisory, VDB Entry
Bugtraq: [RT-SA-2019-005] Cisco RV320 Command Injection Retrieval	BUGTRAQ	seclists.org	Exploit, Mailing List, Third Party Advisory
Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability	CISCO	tools.cisco.com	Vendor Advisory
Cisco RV320 Dual Gigabit WAN VPN Router 1.4.2.15 - Command Injection - Hardware webapps Exploit	EXPLOIT-DB	www.exploit-db.com	Exploit, Third Party Advisory, VDB Entry
Cisco RV320 and RV325 Routers CVE-2019-1652 Remote Command Injection Vulnerability	BID	www.securityfocus.com	Third Party Advisory, VDB Entry
Full Disclosure: [RT-SA-2019-005] Cisco RV320 Command Injection Retrieval	FULLDISC	seclists.org	Exploit, Mailing List, Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis
CISA Known Exploited Vulnerabilities catalog	CISA	www.cisa.gov	kev

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.