{"schema":"threatline.record/2","record":{"id":"CVE-2019-1652","aliases":[],"summary":"Cisco Small Business Routers Improper Input Validation Vulnerability","details":"A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands.","categories":["Network & edge"],"product":"Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers","vendor":"Cisco","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2019-1652","source_modified_at":"2025-10-21T23:45:44.135Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Cisco Small Business RV Series Router Firmware","vendor":"Cisco","versions":[{"status":"affected","version":"n/a"}],"defaultStatus":null}],"fixed_versions":[],"cvss":7.2,"severity":"High","kev":{"listed":true,"date_added":"2022-03-03","due_date":"2022-03-17","required_action":"Apply updates per vendor instructions.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.95923,"percentile":0.99876,"score_date":"2026-10-23"},"published_at":"2019-01-24T16:00:00.000Z","modified_at":"2025-10-21T23:45:44.135Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2019-1652","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2025-10-21T23:45:44.135Z"},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cisco_rv32x_rce.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2018-09-09"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/46243","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2019-01-25"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/46655","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2019-04-03"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2019-1652","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","Metasploit","Exploit-DB","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1652","source":"CISA KEV"},{"source":"CVE List","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-rv-inject","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"]},{"source":"CVE List","url":"https://www.exploit-db.com/exploits/46243/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"source":"CVE List","url":"https://seclists.org/bugtraq/2019/Mar/55","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"source":"CVE List","url":"https://www.exploit-db.com/exploits/46655/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1652","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"total","assessed_at":"2024-11-08T17:20:43.659526Z"},"exploits":[{"source":"Metasploit","kind":"Exploit module","name":"Cisco RV320 and RV325 Unauthenticated Remote Code Execution","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cisco_rv32x_rce.rb","date":"2018-09-09","added":"2026-04-22","check":true},{"source":"Exploit-DB","kind":"Webapps exploit","name":"Cisco RV320 Dual Gigabit WAN VPN Router 1.4.2.15 - Command Injection","url":"https://www.exploit-db.com/exploits/46243","date":"2019-01-25","added":"2019-01-25","verified":true},{"source":"Exploit-DB","kind":"Remote exploit","name":"Cisco RV320 and RV325 - Unauthenticated Remote Code Execution (Metasploit)","url":"https://www.exploit-db.com/exploits/46655","date":"2019-04-03","added":"2019-04-03","verified":true}],"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2025-10-21T23:45:44.135Z","content_hash":"ceaf9d3fad6aafd85735c679521f5ea7c89077d84b2ac1184de8ab1a99f4106c"}}