Cisco has released firmware updates for two small business routers to address vulnerabilities that could allow attackers to take control of the boxes.
Aside from upgrading the device's firmware, the network equipment manufacturer said there are no "solutions.".
The issue concerns dual gigabit WN VPN routers RV320 and RV325 running firmware versions 1.4.2.15 and 1.4.2.17, according to an advisory.
The vulnerability is in the “web management interface” used for routers.
"An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs."
“A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information.”
Security research firm Bad Packets said it had identified 9,657 vulnerable routers worldwide. Most are located in the United States, but Bad Packets found 109 vulnerable hosts in Australia and two vulnerable hosts in New Zealand.
