[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFT2m1LBofxMYKGqiCB9hKkcH-OTqR8sIVbIM7_jLM2I":3,"g5a-risk:CVE-2019-1653":237},{"success":4,"data":5,"meta":235},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":26,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":72,"references":73,"referencesCount":168,"weaknesses":169,"weaknessesCount":178,"isActivelyExploited":4,"cisaInfo":179,"otxData":26,"relatedBlogPosts":180,"seoMetadata":181,"configurations":206,"relatedVendorCves":233,"notableEvents":234},"CVE-2019-1653","What is CVE-2019-1653?","A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.","A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, re...","2019-01-24T16:29:00.317","2025-10-28T13:57:57.263",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":36,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":28},"psirt@cisco.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[37],{"Source":17,"Type":18,"CVSSData":38,"BaseSeverity":44,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":47,"ObtainAllPrivilege":47,"ObtainUserPrivilege":47,"ObtainOtherPrivilege":47,"UserInteractionRequired":47},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":41,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":42,"BaseSeverity":43,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"","MEDIUM",10,2.9,false,0.99876,[48,48,48,48,48,48,48],"High",[52,57,60,64,67,69],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"cisco","rv320_firmware","1.4.2.15","cpe:2.3:o:cisco:rv320_firmware:1.4.2.15:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":58,"criteria":59,"vulnerable":4},"1.4.2.17","cpe:2.3:o:cisco:rv320_firmware:1.4.2.17:*:*:*:*:*:*:*",{"vendor":53,"product":61,"version":62,"criteria":63,"vulnerable":47},"rv320","-","cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",{"vendor":53,"product":65,"version":55,"criteria":66,"vulnerable":4},"rv325_firmware","cpe:2.3:o:cisco:rv325_firmware:1.4.2.15:*:*:*:*:*:*:*",{"vendor":53,"product":65,"version":58,"criteria":68,"vulnerable":4},"cpe:2.3:o:cisco:rv325_firmware:1.4.2.17:*:*:*:*:*:*:*",{"vendor":53,"product":70,"version":62,"criteria":71,"vulnerable":47},"rv325","cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",6,[74,81,84,87,92,95,99,103,106,109,113,118,122,125,129,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163],{"url":75,"source":76,"tags":77},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F152260\u002FCisco-RV320-Unauthenticated-Configuration-Export.html","Packetstormsecurity",[78,79,80],"Exploit","Third Party Advisory","VDB Entry",{"url":82,"source":76,"tags":83},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F152261\u002FCisco-RV320-Unauthenticated-Diagnostic-Data-Retrieval.html",[78,79,80],{"url":85,"source":76,"tags":86},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F152305\u002FCisco-RV320-RV325-Unauthenticated-Remote-Code-Execution.html",[79,80],{"url":88,"source":89,"tags":90},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FMar\u002F59","Seclists",[78,91,79],"Mailing List",{"url":93,"source":89,"tags":94},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FMar\u002F60",[78,91,79],{"url":96,"source":97,"tags":98},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F106732","Securityfocus",[79,80],{"url":100,"source":101,"tags":102},"https:\u002F\u002Fbadpackets.net\u002Fover-9000-cisco-rv320-rv325-routers-vulnerable-to-cve-2019-1653\u002F","Badpackets",[79],{"url":104,"source":89,"tags":105},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FMar\u002F53",[91,79],{"url":107,"source":89,"tags":108},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FMar\u002F54",[91,79],{"url":110,"source":111,"tags":112},"https:\u002F\u002Fthreatpost.com\u002Fscans-cisco-routers-code-execution\u002F141218\u002F","Threatpost",[79],{"url":114,"source":115,"tags":116},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-20190123-rv-info","Cisco",[117],"Vendor Advisory",{"url":119,"source":120,"tags":121},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F46262\u002F","Exploit-db",[78,79,80],{"url":123,"source":120,"tags":124},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F46655\u002F",[79,80],{"url":126,"source":127,"tags":128},"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=bx0RQJDlGbY","Youtube",[79],{"url":130,"source":131,"tags":132},"https:\u002F\u002Fwww.zdnet.com\u002Farticle\u002Fhackers-are-going-after-cisco-rv320rv325-routers-using-a-new-exploit\u002F","Zdnet",[79],{"url":75,"source":76,"tags":134},[78,79,80],{"url":82,"source":76,"tags":136},[78,79,80],{"url":85,"source":76,"tags":138},[79,80],{"url":88,"source":89,"tags":140},[78,91,79],{"url":93,"source":89,"tags":142},[78,91,79],{"url":96,"source":97,"tags":144},[79,80],{"url":100,"source":101,"tags":146},[79],{"url":104,"source":89,"tags":148},[91,79],{"url":107,"source":89,"tags":150},[91,79],{"url":110,"source":111,"tags":152},[79],{"url":114,"source":115,"tags":154},[117],{"url":119,"source":120,"tags":156},[78,79,80],{"url":123,"source":120,"tags":158},[79,80],{"url":126,"source":127,"tags":160},[79],{"url":130,"source":131,"tags":162},[79],{"url":164,"source":165,"tags":166},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1653","CISA",[167],"US Government Resource",31,[170],{"id":171,"name":172,"description":173,"extendedDescription":174,"status":175,"abstraction":176,"structure":177},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",1,{"shortDescription":43,"requiredAction":43,"vulnerabilityName":43,"dateAdded":26},[],{"title":182,"metaDescription":183,"keywords":184,"canonicalUrl":185,"structuredData":186},"What is CVE-2019-1653? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2019-1653, a high severity cyber security vulnerability from 2019. High exploit probability (99.9%). A vulnerability in the web...","CVE-2019-1653, CVE-2019-1653 vulnerability, CVE-2019-1653 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, cisco security, rv320_firmware vulnerability, rv320 vulnerability, rv325_firmware vulnerability, rv325 vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2019-1653",{"@context":187,"@type":188,"headline":182,"description":183,"datePublished":10,"dateModified":11,"author":189,"publisher":193,"about":197,"mainEntityOfPage":201,"articleSection":204,"keywords":205},"https:\u002F\u002Fschema.org","TechArticle",{"@type":190,"name":191,"url":192},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":190,"name":191,"url":192,"logo":194},{"@type":195,"url":196},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":198,"name":6,"description":199,"additionalType":200},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":202,"@id":203},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2019-1653","Cybersecurity","CVE-2019-1653, CVE-2019-1653 vulnerability, CVE-2019-1653 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[207,221],{"Operator":208,"Negate":26,"Nodes":209},"AND",[210,217],{"Operator":211,"Negate":47,"CPEMatch":212},"OR",[213,215],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":214,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CBB99BF6-11C0-448C-91B2-F03690CE9089",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":216,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"61348305-FC9B-4DB4-B039-0A08D44812EE",{"Operator":211,"Negate":47,"CPEMatch":218},[219],{"Vulnerable":47,"Criteria":63,"MatchCriteriaID":220,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7596F6D4-10DA-4F29-95AD-75B60F4670D6",{"Operator":208,"Negate":26,"Nodes":222},[223,229],{"Operator":211,"Negate":47,"CPEMatch":224},[225,227],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":226,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A402AB90-03C8-4B5B-AEF9-CDAC023DA6D3",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":228,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F865F54F-E4D6-4B92-9644-992A44F7D562",{"Operator":211,"Negate":47,"CPEMatch":230},[231],{"Vulnerable":47,"Criteria":71,"MatchCriteriaID":232,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3435D601-EDA8-49FF-8841-EA6DF1518C75",[],[],{"lastModified":11,"cacheTime":236,"version":39},1793219630119,{"score":238,"band":50,"action":239,"scoredAt":240},81,"Emergency patch","2026-07-01T10:23:08.735102+00:00"]