Exploit / PoCmedium
Initial fixes for Cisco RV320 and RV325 routers were incomplete
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-1652 | Authenticated Command Injection in Cisco RV320/RV3325 Small Business Routers | 7.2 | 96% | KEVPoC ×5 | KEV |
| CVE-2019-1653 | Unauthenticated Config Disclosure in Cisco RV320/RV325 Routers | 7.5 | 100% | KEVPoC ×5 | KEV |
From the original article
1 min read at securityaffairs.com
Cisco revealed that security patches released in January to address flaws in Small Business RV320 and RV325 routers were incomplete. Cisco revealed that security updates released in January to address vulnerabilities in Small Business RV320 and RV325 routers were not complete. The tech giant also confirmed that the flaws have been exploited in attacks in the wild.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.