March 3, 2022 · Applied Cybernetics Group
CVE-2019-1652 — Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
Cisco Small Business Routers Improper Input Validation Vulnerability
- Added to KEV
2022-03-03- Federal due date
2022-03-17- Vendor
- Cisco
- Product
- Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
- EPSS
- 99.8th percentile (score 0.927, as of
2026-06-08) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2019-1652
CISA short description
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands.
Required action
Apply updates per vendor instructions.