Vulnslist

find the latest Cisco vulnerabilities

CVE-2019-1898

A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to access the syslog file on an affected device. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for the syslog file. A successful exploit could allow the attacker to access the information contained in the file.

SeverityMEDIUM
CVSS5.3
CWECWE-285
KEV
Published
Modified

Related Products

Product Advisory
Cisco Small Business RV Series Router Firmware cisco-sa-20190619-rv-fileaccess
Cisco RV Series Routers cisco-sa-20190619-rv-fileaccess
Cisco Nexus Dashboard cisco-sa-20190619-rv-fileaccess
Cisco RV215W Wireless-N VPN Router Firmware cisco-sa-20190619-rv-fileaccess
Cisco RV130W Wireless-N Multifunction VPN Router Firmware cisco-sa-20190619-rv-fileaccess
Cisco RV110W Wireless-N VPN Firewall Firmware cisco-sa-20190619-rv-fileaccess