Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-12709

A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. The vulnerability is due to insufficient validation of arguments passed to a specific VMAN CLI command on an affected device. An attacker who has valid administrator access to an affected device could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to run arbitrary commands on the underlying operating system with root privileges, which may lead to complete system compromise.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.5%
CVSS Severity
CVSS v3 Score 6.7
CVSS v2 Score 7.2
Products affected by CVE-2019-12709
  • Cisco » Asr 9000v » Version: N/A
    cpe:2.3:h:cisco:asr_9000v:-
  • Cisco » Asr 9001 » Version: N/A
    cpe:2.3:h:cisco:asr_9001:-
  • Cisco » Asr 9006 » Version: N/A
    cpe:2.3:h:cisco:asr_9006:-
  • Cisco » Asr 9010 » Version: N/A
    cpe:2.3:h:cisco:asr_9010:-
  • Cisco » Asr 9901 » Version: N/A
    cpe:2.3:h:cisco:asr_9901:-
  • Cisco » Asr 9904 » Version: N/A
    cpe:2.3:h:cisco:asr_9904:-
  • Cisco » Asr 9906 » Version: N/A
    cpe:2.3:h:cisco:asr_9906:-
  • Cisco » Asr 9910 » Version: N/A
    cpe:2.3:h:cisco:asr_9910:-
  • Cisco » Asr 9912 » Version: N/A
    cpe:2.3:h:cisco:asr_9912:-
  • Cisco » Asr 9922 » Version: N/A
    cpe:2.3:h:cisco:asr_9922:-
  • Cisco » Ios Xr » Version: 5.1.0
    cpe:2.3:o:cisco:ios_xr:5.1.0
  • Cisco » Ios Xr » Version: 5.1.1
    cpe:2.3:o:cisco:ios_xr:5.1.1
  • Cisco » Ios Xr » Version: 5.1.1.k9sec
    cpe:2.3:o:cisco:ios_xr:5.1.1.k9sec
  • Cisco » Ios Xr » Version: 5.1.2
    cpe:2.3:o:cisco:ios_xr:5.1.2
  • Cisco » Ios Xr » Version: 5.1.3
    cpe:2.3:o:cisco:ios_xr:5.1.3
  • Cisco » Ios Xr » Version: 5.1.3.03
    cpe:2.3:o:cisco:ios_xr:5.1.3.03
  • Cisco » Ios Xr » Version: 5.1.4.base
    cpe:2.3:o:cisco:ios_xr:5.1.4.base
  • Cisco » Ios Xr » Version: 5.2.0
    cpe:2.3:o:cisco:ios_xr:5.2.0
  • Cisco » Ios Xr » Version: 5.2.0.base
    cpe:2.3:o:cisco:ios_xr:5.2.0.base
  • Cisco » Ios Xr » Version: 5.2.1
    cpe:2.3:o:cisco:ios_xr:5.2.1
  • Cisco » Ios Xr » Version: 5.2.2
    cpe:2.3:o:cisco:ios_xr:5.2.2
  • Cisco » Ios Xr » Version: 5.2.3
    cpe:2.3:o:cisco:ios_xr:5.2.3
  • Cisco » Ios Xr » Version: 5.2.4
    cpe:2.3:o:cisco:ios_xr:5.2.4
  • Cisco » Ios Xr » Version: 5.2.4.00
    cpe:2.3:o:cisco:ios_xr:5.2.4.00
  • Cisco » Ios Xr » Version: 5.2.5
    cpe:2.3:o:cisco:ios_xr:5.2.5
  • Cisco » Ios Xr » Version: 5.2.5.ce
    cpe:2.3:o:cisco:ios_xr:5.2.5.ce
  • Cisco » Ios Xr » Version: 5.2.6
    cpe:2.3:o:cisco:ios_xr:5.2.6
  • Cisco » Ios Xr » Version: 5.3.0
    cpe:2.3:o:cisco:ios_xr:5.3.0
  • Cisco » Ios Xr » Version: 5.3.0_base
    cpe:2.3:o:cisco:ios_xr:5.3.0_base
  • Cisco » Ios Xr » Version: 5.3.1
    cpe:2.3:o:cisco:ios_xr:5.3.1
  • Cisco » Ios Xr » Version: 5.3.2
    cpe:2.3:o:cisco:ios_xr:5.3.2
  • Cisco » Ios Xr » Version: 5.3.3
    cpe:2.3:o:cisco:ios_xr:5.3.3
  • Cisco » Ios Xr » Version: 5.3.4
    cpe:2.3:o:cisco:ios_xr:5.3.4
  • Cisco » Ios Xr » Version: 5.3.4.base
    cpe:2.3:o:cisco:ios_xr:5.3.4.base
  • Cisco » Ios Xr » Version: 5.4.3.ce
    cpe:2.3:o:cisco:ios_xr:5.4.3.ce
  • Cisco » Ios Xr » Version: 6.0.0
    cpe:2.3:o:cisco:ios_xr:6.0.0
  • Cisco » Ios Xr » Version: 6.0.1
    cpe:2.3:o:cisco:ios_xr:6.0.1
  • Cisco » Ios Xr » Version: 6.0.2
    cpe:2.3:o:cisco:ios_xr:6.0.2
  • Cisco » Ios Xr » Version: 6.0.2.01
    cpe:2.3:o:cisco:ios_xr:6.0.2.01
  • Cisco » Ios Xr » Version: 6.0.2.base
    cpe:2.3:o:cisco:ios_xr:6.0.2.base
  • Cisco » Ios Xr » Version: 6.0.4.base
    cpe:2.3:o:cisco:ios_xr:6.0.4.base
  • Cisco » Ios Xr » Version: 6.0_base
    cpe:2.3:o:cisco:ios_xr:6.0_base
  • Cisco » Ios Xr » Version: 6.1.0
    cpe:2.3:o:cisco:ios_xr:6.1.0
  • Cisco » Ios Xr » Version: 6.1.1
    cpe:2.3:o:cisco:ios_xr:6.1.1
  • Cisco » Ios Xr » Version: 6.1.2
    cpe:2.3:o:cisco:ios_xr:6.1.2
  • Cisco » Ios Xr » Version: 6.1.3
    cpe:2.3:o:cisco:ios_xr:6.1.3
  • Cisco » Ios Xr » Version: 6.1.3.01
    cpe:2.3:o:cisco:ios_xr:6.1.3.01
  • Cisco » Ios Xr » Version: 6.1.4
    cpe:2.3:o:cisco:ios_xr:6.1.4
  • Cisco » Ios Xr » Version: 6.1.4.base
    cpe:2.3:o:cisco:ios_xr:6.1.4.base
  • Cisco » Ios Xr » Version: 6.2.0
    cpe:2.3:o:cisco:ios_xr:6.2.0
  • Cisco » Ios Xr » Version: 6.2.1
    cpe:2.3:o:cisco:ios_xr:6.2.1
  • Cisco » Ios Xr » Version: 6.2.2
    cpe:2.3:o:cisco:ios_xr:6.2.2
  • Cisco » Ios Xr » Version: 6.2.25
    cpe:2.3:o:cisco:ios_xr:6.2.25
  • Cisco » Ios Xr » Version: 6.2.3
    cpe:2.3:o:cisco:ios_xr:6.2.3
  • Cisco » Ios Xr » Version: 6.2.3.base
    cpe:2.3:o:cisco:ios_xr:6.2.3.base
  • Cisco » Ios Xr » Version: 6.3.1
    cpe:2.3:o:cisco:ios_xr:6.3.1
  • Cisco » Ios Xr » Version: 6.3.15
    cpe:2.3:o:cisco:ios_xr:6.3.15
  • Cisco » Ios Xr » Version: 6.3.2
    cpe:2.3:o:cisco:ios_xr:6.3.2
  • Cisco » Ios Xr » Version: 6.3.3
    cpe:2.3:o:cisco:ios_xr:6.3.3
  • Cisco » Ios Xr » Version: 6.3.3_base
    cpe:2.3:o:cisco:ios_xr:6.3.3_base
  • Cisco » Ios Xr » Version: 6.4.0
    cpe:2.3:o:cisco:ios_xr:6.4.0
  • Cisco » Ios Xr » Version: 6.4.1
    cpe:2.3:o:cisco:ios_xr:6.4.1
  • Cisco » Ios Xr » Version: 6.4.1_base
    cpe:2.3:o:cisco:ios_xr:6.4.1_base
  • Cisco » Ios Xr » Version: 6.4.2
    cpe:2.3:o:cisco:ios_xr:6.4.2
  • Cisco » Ios Xr » Version: 6.4.3
    cpe:2.3:o:cisco:ios_xr:6.4.3
  • Cisco » Ios Xr » Version: 6.5.0
    cpe:2.3:o:cisco:ios_xr:6.5.0
  • Cisco » Ios Xr » Version: 6.5.1
    cpe:2.3:o:cisco:ios_xr:6.5.1
  • Cisco » Ios Xr » Version: 6.5.2
    cpe:2.3:o:cisco:ios_xr:6.5.2
  • Cisco » Ios Xr » Version: 6.6.0
    cpe:2.3:o:cisco:ios_xr:6.6.0
  • Cisco » Ios Xr » Version: 6.6.1
    cpe:2.3:o:cisco:ios_xr:6.6.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved