CVE-2019-1898: Cisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability
Cisco · Cisco RV130W Wireless-N Multifunction VPN Router Firmware
Vendor fix available · Affected: Cisco RV130W Wireless-N Multifunction VPN Router Firmware · Exploitation: check available, not yet exploited
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 98% of scored CVEs
DescriptionCVE.org
A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to access the syslog file on an affected device. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for the syslog file. A successful exploit could allow the attacker to access the information contained in the file.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Cisco · Cisco RV130W Wireless-N Multifunction VPN Router Firmwarebefore 1.0.3.51
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Check available, not yet exploited. A public nuclei template can confirm it on a system you are authorised to test.
- CISA KEV
- Not listed
- Public check
- Cisco RV110W RV130W RV215W Router - Information leakage · nuclei template in projectdiscovery/nuclei-templates
- Vendor
- Cisco
- Published
- June 2019
CoverageNo articles yet
No CyberSIXT article names CVE-2019-1898 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.