November 3, 2021 · Applied Cybernetics Group
CVE-2019-1653 — Cisco Small Business RV320 and RV325 Routers
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
- Added to KEV
2021-11-03- Federal due date
2022-05-03- Vendor
- Cisco
- Product
- Small Business RV320 and RV325 Routers
- EPSS
- 100.0th percentile (score 0.944, as of
2026-06-08) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2019-1653
CISA short description
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.
Required action
Apply updates per vendor instructions.