CVE-2019-15990: Cisco Small Business Routers RV016, RV042, RV042G, and RV082 Information Disclosure Vulnerability
First published: Wed Nov 20 2019(Updated: )
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to view information displayed in the web-based management interface without authentication.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Rv016 Multi-wan Vpn Firmware | <4.2.3.10 | |
| Cisco Rv016 Multi-wan Vpn | ||
| Cisco Rv042 Dual Wan Vpn Firmware | <4.2.3.10 | |
| Cisco Rv042 Dual Wan Vpn | ||
| Cisco Rv042g Dual Gigabit Wan Vpn Firmware | <4.2.3.10 | |
| Cisco Rv042g Dual Gigabit Wan Vpn | ||
| Cisco Rv082 Dual Wan Vpn Firmware | <4.2.3.10 | |
| Cisco Rv082 Dual Wan Vpn |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-15990?
CVE-2019-15990 is a vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers, which could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface.
How can an attacker exploit CVE-2019-15990?
An attacker can exploit CVE-2019-15990 by sending a specially crafted HTTP request to the vulnerable web-based management interface.
What is the severity level of CVE-2019-15990?
CVE-2019-15990 has a severity level of 5.3, which is considered medium.
Which Cisco Small Business RV Series Routers are affected by CVE-2019-15990?
Cisco Rv016 Multi-wan Vpn Firmware, Cisco Rv042 Dual Wan Vpn Firmware, Cisco Rv042g Dual Gigabit Wan Vpn Firmware, and Cisco Rv082 Dual Wan Vpn Firmware (up to version 4.2.3.10) are affected by CVE-2019-15990.
How can I fix the vulnerability CVE-2019-15990?
To fix the vulnerability CVE-2019-15990, Cisco has released software updates. Please refer to the Cisco Security Advisory for more information.
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/softwarecombine
- agent/description
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/tags
- agent/last-modified-date
- agent/severity
- agent/title
- agent/event
- agent/first-publish-date
- vendor/cisco
- canonical/cisco rv016 multi-wan vpn firmware
- canonical/cisco rv016 multi-wan vpn
- canonical/cisco rv042 dual wan vpn firmware
- canonical/cisco rv042 dual wan vpn
- canonical/cisco rv042g dual gigabit wan vpn firmware
- canonical/cisco rv042g dual gigabit wan vpn
- canonical/cisco rv082 dual wan vpn firmware
- canonical/cisco rv082 dual wan vpn