Cisco Small Business RV320 and RV325 Routers CVE-2019-1828 Weak Encryption Security Weakness

Bugtraq ID:	107774
Class:	Design Error
CVE:	CVE-2019-1828
Remote:	Yes
Local:	No
Published:	Apr 04 2019 12:00AM
Updated:	Apr 04 2019 12:00AM
Credit:	David Davidson.
Vulnerable:	Cisco Small Business RV Series Routers 1.4.2.20 Cisco Small Business RV Series Routers 1.4.2.17 Cisco Small Business RV Series Routers 1.4.2.15 Cisco Small Business RV Series Routers 1.4.2.14
Not Vulnerable:	Cisco Small Business RV Series Routers 1.4.2.22

Cisco Small Business RV320 and RV325 Routers CVE-2019-1828 Weak Encryption Security Weakness

Cisco Small Business RV320 and RV325 Routers are prone to a security weakness.

Successfully exploiting this issue may allow attackers to view encrypted data, obtain sensitive information and gain administrator privileges. This may lead to other attacks.

This issue is being tracked by Cisco Bug ID CSCvp09573.

Cisco Small Business RV320 and RV325 Routers CVE-2019-1828 Weak Encryption Security Weakness

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Small Business RV320 and RV325 Routers CVE-2019-1828 Weak Encryption Security Weakness

Solution:
Updates are available. Please see the references or vendor advisory for more information

Cisco Small Business RV320 and RV325 Routers CVE-2019-1828 Weak Encryption Security Weakness

References:

• Cisco Homepage (Cisco)
  
• Cisco Small Business RV320 and RV325 Routers Weak Credential Encryption Vulnerab (Cisco)