CVE-2019-1653: Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

CVE-2019-1653 is an information disclosure vulnerability in Cisco Small Business RV320 and RV325 routers caused by improper access controls on certain URLs. Successful exploitation enables an attacker to retrieve router configuration data or detailed diagnostics, potentially exposing sensitive information. The vulnerability has been observed in active exploitation scenarios. No vendor advisory or patch details are included in the provided information.

Exploitation of this vulnerability can lead to unauthorized disclosure of router configuration and diagnostic information, which may contain sensitive data such as credentials, network topology, or security settings. This exposure can facilitate further attacks against the affected network infrastructure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the router management interface to trusted networks and users only to reduce exposure.