Yes—Cisco RV320 and RV325 routers remain a security risk if they are still in service. Cisco’s later advisories say multiple vulnerabilities affect all software releases and that it will not issue fixes for the end-of-life platform. Disabling WAN Remote Management and blocking management traffic can reduce exposure, but neither repairs the router. Plan to replace it.
Why an RV320 or RV325 is still a concern
The RV320 and RV325 have had multiple classes of vulnerability, including information disclosure, command injection, authentication-related issues, remote code execution, and denial of service. Early flaws had firmware fixes, but later Cisco advisories cover all software releases and state that no updates will be provided. Installing an older fix therefore does not make the router safe from the later vulnerability sets.
The exposed attack surface is the web-based management interface. When WAN Remote Management is enabled, that interface can be reached through the router’s WAN IP. That makes an internet-facing management interface a materially greater risk than management restricted to the LAN, although disabling WAN access does not remove the underlying vulnerable software.
Cisco has reported proof-of-concept exploit code for CVE-2023-20025 and CVE-2023-20026. In a March 7, 2025 revision, Cisco also said its Product Security Incident Response Team had learned of additional attempted exploitation of some vulnerabilities in the wild in March 2025. Cisco has not published a count of compromised RV320/RV325 devices, affected customers, or exploit attempts, so those reports do not establish how many routers were compromised.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
What the Cisco advisories say
The vulnerability history matters because some older flaws were fixed in firmware, while later advisories explicitly state that fixes will not be issued. The table summarizes the scope and impact Cisco describes; CVSS values are included only where the advisory figures are stated in the available material.
| Issue | Affected releases and impact | Fix or status |
|---|---|---|
| CVE-2019-1653 | Firmware 1.4.2.15 through 1.4.2.20: unauthenticated remote requests to the web management interface could retrieve router configuration or diagnostic information. Cisco’s 2019 rating was CVSS 7.5. | Cisco identified 1.4.2.22 as the complete fix. |
| CVE-2019-1652 | Firmware 1.4.2.15 through 1.4.2.20: command execution as root through the web interface. | Early issue; later end-of-life vulnerabilities remain unresolved. |
| CVE-2019-15957 | RV320/RV325 firmware earlier than 1.5.1.05 was listed as vulnerable. | Cisco listed 1.5.1.05 or later as fixed for this issue. |
| Other 2019 firmware issues | Cisco also documented static X.509 certificates, an SSH host key, hardcoded password hashes, and vulnerabilities in third-party components. | These issues do not change the no-fix status of later advisory groups. |
| CVE-2023-20026 and CVE-2023-20118 | All RV320/RV325 software releases: an authenticated remote attacker could execute commands on the underlying operating system. Cisco’s 2023 multi-vulnerability advisory assigned CVSS 9.0 to its highest-rated entries. | Cisco said it would not release software updates. |
| CVE-2023-20117 and CVE-2023-20128 | Authenticated attackers could inject and execute commands as root. | No software updates are available. |
| CVE-2024-20516 through CVE-2024-20524 | All RV320/RV325 releases: authenticated remote-code-execution and denial-of-service flaws. Cisco’s 2024 denial-of-service group rating was CVSS 6.8. | Cisco said the end-of-life products would not receive fixes. |
The early firmware fixes are relevant to their specific 2019 issues, but they are not a remedy for the later vulnerabilities. Cisco’s later advisories state that the platform is past its End of Software Maintenance Releases dates and that it will not issue updates for the vulnerabilities they describe.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
What to do if you still operate one
Use these actions to reduce exposure and prepare a controlled migration. They are interim measures, not a way to patch the router.
- Inventory the devices. Record every RV320 and RV325, its firmware version, where it is deployed, and whether WAN Remote Management is enabled. Include devices at branch offices and other locations, not only the main network.
- Disable WAN Remote Management. On each router, open Firewall > General > Remote Management and disable the feature unless there is a documented operational requirement. Cisco says this leaves management available through the LAN while reducing exposure.
- Block inbound management access at the WAN boundary. Where applicable, block inbound TCP ports 443 and 60443 on the WAN. Check upstream firewall or filtering rules as well as the router’s own settings; the objective is to prevent internet access to management ports.
- Check for signs of unauthorized access. Review router logs, configuration files, administrator accounts, certificates, and SSH keys for unexpected changes or activity. If exposure or compromise is suspected, rotate credentials and other secrets that the router could have exposed.
- Schedule replacement. Track the router through decommissioning rather than treating reduced exposure as remediation. Do not rely on a firmware upgrade to address the later advisory groups, for which Cisco says no update will be released.
How to choose a replacement
Cisco recommends upgrading RV320/RV325 hardware to Cisco Meraki or Cisco 1000 Series Integrated Services Routers. The right replacement depends on the role the old router performs; the family name alone is not enough to establish feature or configuration compatibility.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
- Throughput: Compare expected real-world WAN and VPN traffic with the candidate device’s capabilities.
- VPN requirements: Confirm the needed tunnel types, capacity, and compatibility with the organization’s remote sites and users.
- WAN failover: Check whether the current deployment uses multiple WAN connections and confirm the replacement supports the required failover behavior.
- Memory and workload: Account for routing, security, and other enabled features rather than comparing devices only by port count.
- Licensing and operations: Verify licensing, management model, support lifecycle, and ongoing operating requirements for the specific model and deployment.
- Configuration migration: Plan to validate rules, addressing, VPN settings, certificates, and other configuration rather than assuming the old configuration can be imported unchanged.
For an internet provider or enterprise, include each deployed unit in the migration plan and prioritize routers whose management interfaces are reachable from the WAN. Cisco’s advisories do not provide a prevalence figure, so urgency should be based on actual deployment and exposure—not an assumed number of compromised devices.
Quick Recap
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
