CVE-2019-15990CWE-285

Cisco Small Business Routers RV016, RV042, RV042G, and RV082 Information Disclosure Vulnerability

Medium · published November 26, 2019

CVSS v3.0
5.3
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to view information displayed in the web-based management interface without authentication.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01195 · 67.8th percentile
Weakness
CWE-285 · Improper Authorization
Published
2019-11-26T03:42Z
EPSS history
Timeline
  • 26 NOV 03:42Z
    Cisco Small Business Routers RV016, RV042, RV042G, and RV082 Information Disclosure Vulnerability
    cvelistv5