5
CVSSv2

CVE-2019-1898

Published: 20/06/2019 Updated: 16/10/2020
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote malicious user to access the syslog file on an affected device. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for the syslog file. A successful exploit could allow the malicious user to access the information contained in the file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco rv110w_firmware -

cisco rv130w_firmware -

cisco rv215w_firmware -

Vendor Advisories

A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to access the syslog file on an affected device The vulnerability is due to improper authorization of an HTTP request An attacker could exploit this vulnerability by accessing the URL for the syslog fil ...
Check Point Reference: CPAI-2019-3134 Date Published: 16 Jan 2024 Severity: Medium ...