Cisco successfully patched its RV320 and RV325 WAN VPN routers after first bungling the fix. Cisco also reported two new medium-severity router bugs with no reported fixes or workarounds. One bug (CVE-2019-1828) is tied to weak credential encryption use by both routers. The other is insufficient validation of a user-supplied input bug (Cisco 2019-1827), also affecting both routers, also with no patches available. The bugs were identified last September by RedTeam Pentesting and patched by Cisco on January 23.
Source: https://threatpost.com/cisco-finally-patches-routers-bugs-as-new-unpatched-flaws-surface/143528/

