Vulnerabilitymedium
Consumer routers targeted by DNS hijacking attackers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-1652 | Authenticated Command Injection in Cisco RV320/RV3325 Small Business Routers | 7.2 | 96% | KEVPoC ×5 | KEV |
| CVE-2019-1653 | Unauthenticated Config Disclosure in Cisco RV320/RV325 Routers | 7.5 | 100% | KEVPoC ×5 | KEV |
| CVE-2019-1828 | A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated… | 8.1 | <1% |
From the original article
2 min read at helpnetsecurity.com
Owners of a slew of D-Link, ARGtek, DSLink, Secutech, TOTOLINK and Cisco consumer routers are urged to update their device’s firmware, lest they fall prey to ongoing DNS hijacking campaigns and device hijacking attacks. The Cisco routers targeted are Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN routers. The exploited vulnerabilities are CVE-2019-1653 , CVE-2019-1652 , and CVE-2019-1828.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.