CVE-2019-1653

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

7.5 HighIn KEVPublic exploit

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

99.9%Up 39.8 points since Apr 14, 2021

What each source reports

CVE List Score used 7.5

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

Record: CVE-2019-1653
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-284
Updated: 2026-11-02

EUVDEUVD-2019-10210 7.5

Record: EUVD-2019-10210
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-j8w2-wx5p-fvx4 7.5

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325...

Record: GHSA-j8w2-wx5p-fvx4
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200, CWE-284
Updated: 2026-11-02

CISA KEV No score

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.

Record: CVE-2019-1653
Weakness: CWE-284
Updated: 2026-11-02

NVD 7.5

Record: CVE-2019-1653
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-284
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Cisco RV320 and RV325 Unauthenticated Remote Code Execution	2018-09-09
Exploit-DB	Cisco RV300 / RV320 - Information Disclosure	2019-01-28
PoC in GitHub	dubfr33/CVE-2019-1653	2019-01-30
PoC in GitHub	shaheemirza/CiscoSpill	2019-04-01
Exploit-DB	Cisco RV320 and RV325 - Unauthenticated Remote Code Execution (Metasploit)	2019-04-03
PoC in GitHub	ibrahimzx/CVE-2019-1653	2023-03-26
PoC in GitHub	elzerjp/nuclei-CiscoRV320Dump-CVE-2019-1653	2024-11-14
Metasploit	Cisco RV320/RV326 Configuration Disclosure	2019-01-24
Nuclei	Cisco Small Business WAN VPN Routers - Sensitive Information Disclosure

History

History
Recorded	Changed	Sources
Nov 3, 2026	exploitation, exploits
Nov 2, 2026	first indexed	CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-1653 is a high vulnerability (CVSS 7.5) in Cisco Small Business Rv320 And Rv325 Routers, published January 24, 2019. CISA lists it as known to be exploited, since November 3, 2021. EUVD reports exploitation since November 3, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 99.9%, the 99th percentile. No source names a fixed version.

References

Show 12 moreShow less