{"metadata": {"vulnerability": "CVE-2019-1663", "count": 56, "kinds": {"milestone": 5, "sighting": 13, "kev": 0, "other": 38}}, "data": [{"timestamp": "2018-12-06T00:00:00Z", "date_only": false, "value": "2018-12-06T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2019-1663", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-02-27T00:00:00Z", "date_only": false, "value": "2019-02-27T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201902-0427", "record": "VAR-201902-0427", "field": "sources_update_date.data.4.date"}, {"timestamp": "2019-02-27T00:00:00Z", "date_only": false, "value": "2019-02-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2019-1663", "field": "containers.cna.datePublic"}, {"timestamp": "2019-02-27T15:36:51Z", "date_only": false, "value": "2019-02-27T15:36:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-20190227-RMI-CMD-EX", "record": "CISCO-SA-20190227-RMI-CMD-EX", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2019-02-27T16:00:00Z", "date_only": false, "value": "2019-02-27T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-20190227-RMI-CMD-EX", "record": "CISCO-SA-20190227-RMI-CMD-EX", "field": "document.tracking.initial_release_date"}, {"timestamp": "2019-02-27T16:00:00Z", "date_only": false, "value": "2019-02-27T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-20190227-RMI-CMD-EX", "record": "CISCO-SA-20190227-RMI-CMD-EX", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2019-02-28T00:00:00Z", "date_only": false, "value": "2019-02-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201902-0427", "record": "VAR-201902-0427", "field": "sources_release_date.data.2.date"}, {"timestamp": "2019-02-28T00:00:00Z", "date_only": false, "value": "2019-02-27T16:00:00-0800", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / cisco", "record": "CVE-2019-1663", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2019-02-28T00:00:00Z", "date_only": false, "value": "2019-02-27T16:00:00-0800", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2019-1663", "record": "GSD-2019-1663", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2019-02-28T00:00:00Z", "date_only": false, "value": "2019-02-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-082", "record": "CERTFR-2019-AVI-082", "field": "revisions.0.revision_date"}, {"timestamp": "2019-02-28T00:00:00Z", "date_only": true, "value": "2019-02-28", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2019-05902", "record": "CNVD-2019-05902", "field": "submitTime"}, {"timestamp": "2019-02-28T15:31:41Z", "date_only": false, "value": "2019-02-28T15:31:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/2779", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "428a124d-7aff-425f-b784-c1d9e21e536f", "content": "\u274c Cisco Fixes Critical Flaw in Wireless VPN, Firewall Routers \u274c\n\nCisco said that CVE-2019-1663, which has a CVSS score of 9.8, allows unauthenticated, remote attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"Threatpost | The first stop for security news\".", "url": "https://t.me/cibsecurity/2779"}, {"timestamp": "2019-02-28T15:37:47Z", "date_only": false, "value": "2019-02-28T15:37:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/8646", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "ea77cdbb-c2e6-4386-a870-c89ce8f58932", "content": "Cisco Fixes Critical Flaw in Wireless VPN, Firewall Routers Cisco said that CVE-2019-1663, which has a CVSS score of 9.8, allows unauthenticated, remote attackers to execute arbitrary code. https://threatpost.com/cisco-fixes-critical-flaw-in-wireless-vpn-firewall-routers/142284/", "url": "https://t.me/ctinow/8646"}, {"timestamp": "2019-02-28T18:00:00Z", "date_only": false, "value": "2019-02-28T18:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-1663", "field": "cveMetadata.datePublished"}, {"timestamp": "2019-02-28T18:29:00Z", "date_only": false, "value": "2019-02-28T18:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P7C3-96FJ-V9CF", "record": "GHSA-P7C3-96FJ-V9CF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2019-02-28T18:29:00Z", "date_only": false, "value": "2019-02-28T18:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-1663", "record": "GSD-2019-1663", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2019-02-28T18:29:02.040Z", "date_only": false, "value": "2019-02-28T18:29:02.040000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201902-0427", "record": "VAR-201902-0427", "field": "sources_release_date.data.6.date"}, {"timestamp": "2019-02-28T18:29:02.040Z", "date_only": false, "value": "2019-02-28T18:29:02.040", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-1663", "record": "FKIE_CVE-2019-1663", "field": "published"}, {"timestamp": "2019-03-01T16:19:36Z", "date_only": false, "value": "2019-03-01T16:19:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/25144", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "0f8f9e27-5934-4f35-bcba-20895ddf3661", "content": "Cisco released security updates for 2 severe vulnerabilities that affected Cisco wireless VPN, Firewall and Cisco Webex Meetings Desktop App. First one is a remote command execution vulnerability that has been marked as \u201cCritical\u201d and another one is local Command Injection Vulnerability which is marked as \u201chigh\u201d severity. Remote Command Execution Vulnerability CVE-2019-1663 affected Cisco [\u2026]\nThe post Cisco Released Security Updates for 2 Vulnerabilities that allows Hackers to Compromise Cisco Wireless Routers (https://gbhackers.com/cisco-released-security-updates-3/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/25144"}, {"timestamp": "2019-03-02T00:00:00Z", "date_only": false, "value": "2019-03-02T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201902-0427", "record": "VAR-201902-0427", "field": "sources_release_date.data.0.date"}, {"timestamp": "2019-03-02T00:00:00Z", "date_only": true, "value": "2019-03-02", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2019-05902", "record": "CNVD-2019-05902", "field": "openTime"}, {"timestamp": "2019-03-06T00:00:00Z", "date_only": false, "value": "2019-03-06T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201902-0427", "record": "VAR-201902-0427", "field": "sources_update_date.data.7.date"}, {"timestamp": "2019-03-06T16:27:05Z", "date_only": false, "value": "2019-03-06T16:27:05+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-20190227-RMI-CMD-EX", "record": "CISCO-SA-20190227-RMI-CMD-EX", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2019-04-03T00:00:00Z", "date_only": false, "value": "2019-04-03T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201902-0427", "record": "VAR-201902-0427", "field": "sources_update_date.data.5.date"}, {"timestamp": "2019-04-15T00:00:00Z", "date_only": false, "value": "2019-04-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/46705", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "5a24b85f-d9e2-4dd3-888d-eb6c5c74d8f3", "url": "https://www.exploit-db.com/exploits/46705"}, {"timestamp": "2019-06-06T00:00:00Z", "date_only": false, "value": "2019-06-06T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201902-0427", "record": "VAR-201902-0427", "field": "sources_update_date.data.0.date"}, {"timestamp": "2019-06-20T15:41:52Z", "date_only": false, "value": "2019-06-20T15:41:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-20190227-RMI-CMD-EX", "record": "CISCO-SA-20190227-RMI-CMD-EX", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2019-06-20T15:41:52Z", "date_only": false, "value": "2019-06-20T15:41:52+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-20190227-RMI-CMD-EX", "record": "CISCO-SA-20190227-RMI-CMD-EX", "field": "document.tracking.current_release_date"}, {"timestamp": "2019-08-30T18:32:25Z", "date_only": false, "value": "2019-08-30T18:32:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cve_2019_1663_cisco_rmi_rce.rb", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "19a96fd6-d1a3-4694-99a5-54437be3d0f5", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cve_2019_1663_cisco_rmi_rce.rb"}, {"timestamp": "2019-09-02T20:06:05Z", "date_only": false, "value": "2019-09-02T20:06:05.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2019-1663", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2019-09-03T00:00:00Z", "date_only": false, "value": "2019-09-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/47348", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "b9713b5b-cf38-4861-b942-dc52d47bb654", "url": "https://www.exploit-db.com/exploits/47348"}, {"timestamp": "2020-10-05T00:00:00Z", "date_only": false, "value": "2020-10-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201902-0427", "record": "VAR-201902-0427", "field": "sources_update_date.data.2.date"}, {"timestamp": "2020-10-05T20:27:00Z", "date_only": false, "value": "2020-10-05T20:27Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-1663", "record": "GSD-2019-1663", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2020-10-05T20:27:08.843Z", "date_only": false, "value": "2020-10-05T20:27:08.843000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201902-0427", "record": "VAR-201902-0427", "field": "sources_update_date.data.6.date"}, {"timestamp": "2022-04-14T00:00:00Z", "date_only": true, "value": "2022-04-14", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-32613", "record": "CNVD-2022-32613", "field": "submitTime"}, {"timestamp": "2022-05-02T00:00:00Z", "date_only": false, "value": "2022-05-02T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201902-0427", "record": "VAR-201902-0427", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-05-13T01:14:53Z", "date_only": false, "value": "2022-05-13T01:14:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P7C3-96FJ-V9CF", "record": "GHSA-P7C3-96FJ-V9CF", "field": "published"}, {"timestamp": "2022-05-13T01:14:53Z", "date_only": false, "value": "2022-05-13T01:14:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P7C3-96FJ-V9CF", "record": "GHSA-P7C3-96FJ-V9CF", "field": "modified"}, {"timestamp": "2022-05-29T00:00:00Z", "date_only": false, "value": "2022-05-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201902-0427", "record": "VAR-201902-0427", "field": "sources_release_date.data.1.date"}, {"timestamp": "2022-05-29T00:00:00Z", "date_only": true, "value": "2022-05-29", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-32613", "record": "CNVD-2022-32613", "field": "openTime"}, {"timestamp": "2022-09-03T03:39:28Z", "date_only": false, "value": "2022-09-03T03:39:28+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-20190227-RMI-CMD-EX", "record": "CISCO-SA-20190227-RMI-CMD-EX", "field": "document.tracking.generator.date"}, {"timestamp": "2022-12-07T16:08:09Z", "date_only": false, "value": "2022-12-07T16:08:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/188", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "a1565be0-fb1f-4475-bbb2-b7a42e1a78dc", "content": "#exploit\n1. CVE-2019-1663:\nA pre-authentication code execution vulnerability in the RV110W/RV130W/RV215W router series\nhttps://www.pentestpartners.com/security-blog/cisco-rv130-its-2019-but-yet-strcpy\n\n2. CVE-2019-6977:\nPHP \"Sandbox\" escape\nhttps://hackerone.com/reports/478368", "url": "https://t.me/CyberSecurityTechnologies/188"}, {"timestamp": "2023-12-13T01:23:50.983Z", "date_only": false, "value": "2023-12-13T01:23:50.983166Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-1663", "record": "GSD-2019-1663", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T13:56:47.640Z", "date_only": false, "value": "2023-12-18T13:56:47.640000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-201902-0427", "record": "VAR-201902-0427", "field": "last_update_date"}, {"timestamp": "2024-08-04T18:20:28.401Z", "date_only": false, "value": "2024-08-04T18:20:28.401Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2019-1663", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-19T17:21:25.889Z", "date_only": false, "value": "2024-11-19T17:21:25.889132Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-1663", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-19T17:21:25.889Z", "date_only": false, "value": "2024-11-19T17:21:25.889132Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-1663", "record": "FKIE_CVE-2019-1663", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-11-19T19:16:07.667Z", "date_only": false, "value": "2024-11-19T19:16:07.667Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2019-1663", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-11-19T19:16:07.667Z", "date_only": false, "value": "2024-11-19T19:16:07.667Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-1663", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "a9cb2aa2-c490-4409-a337-a7e860aa6458"}, {"timestamp": "2025-02-23T04:10:13Z", "date_only": false, "value": "2025-02-23T04:10:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "1a0f5934-69a4-43a2-968e-8fa4c1384d3e"}, {"timestamp": "2025-09-03T03:00:07Z", "date_only": false, "value": "2025-09-03T03:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cHcofYq5yVH7DLc69hIcAd2SE1E77x3v0sMIcSbMCujGDRo", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "8134f42b-a7e0-4400-b1c9-9a6285c43cb3"}, {"timestamp": "2025-10-14T10:31:52Z", "date_only": false, "value": "2025-10-14T10:31:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "e8df76da-ca2d-4710-b98e-210d0218c468"}, {"timestamp": "2026-06-17T02:28:59.520Z", "date_only": false, "value": "2026-06-17T02:28:59.520", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-1663", "record": "FKIE_CVE-2019-1663", "field": "lastModified"}, {"timestamp": "2026-07-17T07:00:04.428Z", "date_only": false, "value": "2026-07-17T07:00:04.428371Z", "kind": "sighting", "label": "Seen", "source": "Telegram/X7sJ5xTHxbbMwNKhy_MqaFfmqW2hoQyBS_wI7CRCZVKq2rWk", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "df694285-0207-437d-81a1-bb7ba04002f3"}, {"timestamp": "2026-09-01T20:02:47.531Z", "date_only": false, "value": "2026-09-01T20:02:47.531584Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/4295", "record": "CVE-2019-1663", "field": "creation_timestamp", "uuid": "7be2eba1-2f6e-4f86-8b0d-1d543b62a9c4", "content": "Black Hat Ethical Hacking\nZero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Zero-Day Bug Impacts Problem-Plagued Cisco SOHO RoutersPost Views: 47 \nstyle=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> \nReading Time: 1 Minute\nCisco Systems said it will not fix a critical vulnerability found in three of its SOHO router models. The bug, rated 9.8 in severity out of 10, could allow unauthenticated remote users to hijack targeted equipment and gain elevated privileges within effected systems.\nThe three Cisco router models (RV110W, RV130, and RV215W) and one VPN firewall device (RV130W) are of varying age and have reached \u201cend of life\u201d and will not be patched, according to Cisco.\n\nThe company is advising customers to replace the equipment.\n\n\u201cCisco\u00a0has not released and will not release software updates to address the vulnerability described in this advisory. The Cisco\u00a0Small Business RV110W, RV130, RV130W, and RV215W Routers have entered the end-of-life process,\u201d the company wrote. The company added no workaround is available either. Buffer Overflow BugIn the Cisco Systems Security Advisory posted Wednesday, the networking giant said the flaw is due to improper validation of user-supplied input in the web-based management interface.\n\n\u201cAn attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device,\u201d Cisco wrote.\n\nWorkaround mitigation options, such as disabling the web-based management interface, are not available. \u201cThe web-based management interface of these devices is available through a local LAN connection, which cannot be disabled, or through the WAN connection if the remote management feature is enabled,\u201d Cisco wrote. \u201c[However by] default, the remote management feature is disabled on these devices,\u201d Cisco wrote.\nSee Also: Fake Netflix App on Google Play Spreads Malware Via WhatsApp Past Router ProblemsEach of the routers (RV110W, RV130 and RV215W) have had a rocky past. In 2019, hackers exploited a similar critical bug (CVE-2019-1663) after a public proof of concept was made available by researchers with Pen Test Partners.\n\nIn its blog post, Pen Test Partners attributed the root cause of 2019 bug to Cisco\u2019s reliance on the use of insecure C programming language, such as strcpy (string copy).\n\nResearcher Treck Zhou, who is credited for finding the 2021 bug, provided no such similar analysis. Unlike the 2019 bug, Cisco said it \u201cis not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\u201d\nSee Also: Offensive Security Tool: DirDar One More Critical Router BugOn Wednesday, Cisco also warned\u00a0of second critical bug, with a severity rating of 9.8, that impacts its Cisco SD-WAN vManage software. Two additional high-severity bugs were also reported impacting the same Cisco SD-WAN vManage software.\n\n\u201cMultiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system,\u201d Cisco wrote.\n\nEach of these bugs (CVE-2021-1137, CVE-2021-1479, CVE-2021-1480) are separate and cannot and do not need to be chained together. \u201cThe vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability,\u201d Cisco wrote.\n\n[...]", "url": "https://t.me/hacking_Attack/4295"}]}