{
  "id": "cve-2019-1653",
  "cveID": "CVE-2019-1653",
  "vendor": "Cisco",
  "product": "Small Business RV320 and RV325 Routers",
  "vulnerabilityName": "Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability",
  "shortDescription": "Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.",
  "requiredAction": "Apply updates per vendor instructions.",
  "dateAdded": "2021-11-03",
  "dueDate": "2022-05-03",
  "knownRansomware": false,
  "cwes": [
    "CWE-284"
  ],
  "notes": "https://nvd.nist.gov/vuln/detail/CVE-2019-1653",
  "sources": [
    {
      "label": "NVD",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1653"
    },
    {
      "label": "CISA KEV",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    },
    {
      "label": "nvd.nist.gov",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1653"
    }
  ],
  "cvss": {
    "score": 7.5,
    "severity": "HIGH",
    "version": "3.1",
    "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
  },
  "epss": {
    "score": 0.99876,
    "percentile": 0.99963
  },
  "timeline": [
    {
      "date": "2021-11-03",
      "event": "Added to the CISA KEV catalog"
    },
    {
      "date": "2022-05-03",
      "event": "CISA remediation due date (BOD 22-01)"
    }
  ],
  "status": "past due"
}