CVE-2019-1828

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to access administrative credentials. The vulnerability exists because affected devices use weak encryption algorithms for user credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack and decrypting intercepted credentials. A successful exploit could allow the attacker to gain access to an affected device with administrator privileges. This vulnerability affects Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers running firmware releases prior to 1.4.2.22.

• CWE-327
• CWE-327

• http://www.securityfocus.com/bid/107774Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190404-rv-weak-encryptVendor Advisory
• http://www.securityfocus.com/bid/107774Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190404-rv-weak-encryptVendor Advisory

Published

Apr 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18273OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 S…4.8
• CVE-2019-18275OSIsoft PI Vision, All versions of PI Vision prior to 2019. …6.5
• CVE-2019-18276An issue was discovered in disable_priv_mode in shell.c in G…7.8
• CVE-2019-18277A flaw was found in HAProxy before 2.0.6. In legacy mode, me…7.5
• CVE-2019-18278When executing VideoLAN VLC media player 3.0.8 with libqt on…7.8
• CVE-2019-18279In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the inclu…8.8
• CVE-2019-18280Sourcecodester Online Grading System 1.0 is affected by a Cr…8.8
• CVE-2019-18281An out-of-bounds memory access in the generateDirectionalRun…4.3
• CVE-2019-18282The flow_dissector feature in the Linux kernel 4.3 through 5…5.3
• CVE-2019-18283A vulnerability has been identified in SPPA-T3000 Applicatio…9.8
• CVE-2019-18284A vulnerability has been identified in SPPA-T3000 Applicatio…9.8
• CVE-2019-18285A vulnerability has been identified in SPPA-T3000 Applicatio…5.9