CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-1648

A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the group configuration. An attacker could exploit this vulnerability by writing a crafted file to the directory where the user group configuration is located in the underlying operating system. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.0%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 7.2

References

Products affected by CVE-2019-1648

Cisco » Sd-Wan » Version: N/A

cpe:2.3:a:cisco:sd-wan:-
Cisco » Sd-Wan » Version: 16.2.0

cpe:2.3:a:cisco:sd-wan:16.2.0
Cisco » Sd-Wan » Version: 16.2.1

cpe:2.3:a:cisco:sd-wan:16.2.1
Cisco » Sd-Wan » Version: 16.2.10

cpe:2.3:a:cisco:sd-wan:16.2.10
Cisco » Sd-Wan » Version: 16.2.11

cpe:2.3:a:cisco:sd-wan:16.2.11
Cisco » Sd-Wan » Version: 16.2.12

cpe:2.3:a:cisco:sd-wan:16.2.12
Cisco » Sd-Wan » Version: 16.2.13

cpe:2.3:a:cisco:sd-wan:16.2.13
Cisco » Sd-Wan » Version: 16.2.14

cpe:2.3:a:cisco:sd-wan:16.2.14
Cisco » Sd-Wan » Version: 16.2.2

cpe:2.3:a:cisco:sd-wan:16.2.2
Cisco » Sd-Wan » Version: 16.2.3

cpe:2.3:a:cisco:sd-wan:16.2.3
Cisco » Sd-Wan » Version: 16.2.4

cpe:2.3:a:cisco:sd-wan:16.2.4
Cisco » Sd-Wan » Version: 16.2.5

cpe:2.3:a:cisco:sd-wan:16.2.5
Cisco » Sd-Wan » Version: 16.2.6

cpe:2.3:a:cisco:sd-wan:16.2.6
Cisco » Sd-Wan » Version: 16.2.7

cpe:2.3:a:cisco:sd-wan:16.2.7
Cisco » Sd-Wan » Version: 16.2.8

cpe:2.3:a:cisco:sd-wan:16.2.8
Cisco » Sd-Wan » Version: 16.2.9

cpe:2.3:a:cisco:sd-wan:16.2.9
Cisco » Sd-Wan » Version: 16.3.0

cpe:2.3:a:cisco:sd-wan:16.3.0
Cisco » Sd-Wan » Version: 16.3.1

cpe:2.3:a:cisco:sd-wan:16.3.1
Cisco » Sd-Wan » Version: 16.3.2

cpe:2.3:a:cisco:sd-wan:16.3.2
Cisco » Sd-Wan » Version: 16.3.3

cpe:2.3:a:cisco:sd-wan:16.3.3
Cisco » Sd-Wan » Version: 17.1.0

cpe:2.3:a:cisco:sd-wan:17.1.0
Cisco » Sd-Wan » Version: 17.1.1

cpe:2.3:a:cisco:sd-wan:17.1.1
Cisco » Sd-Wan » Version: 17.1.2

cpe:2.3:a:cisco:sd-wan:17.1.2
Cisco » Sd-Wan » Version: 17.1.3

cpe:2.3:a:cisco:sd-wan:17.1.3
Cisco » Sd-Wan » Version: 17.1.4

cpe:2.3:a:cisco:sd-wan:17.1.4
Cisco » Sd-Wan » Version: 17.1.5

cpe:2.3:a:cisco:sd-wan:17.1.5
Cisco » Sd-Wan » Version: 17.2.0

cpe:2.3:a:cisco:sd-wan:17.2.0
Cisco » Sd-Wan » Version: 17.2.1

cpe:2.3:a:cisco:sd-wan:17.2.1
Cisco » Sd-Wan » Version: 17.2.2

cpe:2.3:a:cisco:sd-wan:17.2.2
Cisco » Sd-Wan » Version: 17.2.3

cpe:2.3:a:cisco:sd-wan:17.2.3
Cisco » Sd-Wan » Version: 17.2.4

cpe:2.3:a:cisco:sd-wan:17.2.4
Cisco » Sd-Wan » Version: 17.2.5

cpe:2.3:a:cisco:sd-wan:17.2.5
Cisco » Sd-Wan » Version: 17.2.6

cpe:2.3:a:cisco:sd-wan:17.2.6
Cisco » Sd-Wan » Version: 17.2.7

cpe:2.3:a:cisco:sd-wan:17.2.7
Cisco » Sd-Wan » Version: 17.2.8

cpe:2.3:a:cisco:sd-wan:17.2.8
Cisco » Sd-Wan » Version: 17.2.9

cpe:2.3:a:cisco:sd-wan:17.2.9
Cisco » Sd-Wan » Version: 18.1.0

cpe:2.3:a:cisco:sd-wan:18.1.0
Cisco » Sd-Wan » Version: 18.1.1

cpe:2.3:a:cisco:sd-wan:18.1.1
Cisco » Sd-Wan » Version: 18.2.0

cpe:2.3:a:cisco:sd-wan:18.2.0
Cisco » Sd-Wan » Version: 18.3.0

cpe:2.3:a:cisco:sd-wan:18.3.0
Cisco » Sd-Wan » Version: 18.3.1

cpe:2.3:a:cisco:sd-wan:18.3.1
Cisco » Sd-Wan » Version: 18.3.2

cpe:2.3:a:cisco:sd-wan:18.3.2
Cisco » Sd-Wan » Version: 18.3.3

cpe:2.3:a:cisco:sd-wan:18.3.3
Cisco » Sd-Wan » Version: 18.3.4

cpe:2.3:a:cisco:sd-wan:18.3.4
Cisco » Sd-Wan » Version: 18.3.5

cpe:2.3:a:cisco:sd-wan:18.3.5
Cisco » Sd-Wan » Version: 18.3.6

cpe:2.3:a:cisco:sd-wan:18.3.6
Cisco » Sd-Wan » Version: 18.3.8

cpe:2.3:a:cisco:sd-wan:18.3.8
Cisco » Vbond Orchestrator » Version: N/A

cpe:2.3:a:cisco:vbond_orchestrator:-
Cisco » Vmanage Network Management » Version: N/A

cpe:2.3:a:cisco:vmanage_network_management:-
Cisco » Vsmart Controller » Version: N/A

cpe:2.3:a:cisco:vsmart_controller:-
Cisco » Vedge 1000 » Version: N/A

cpe:2.3:h:cisco:vedge_1000:-
Cisco » Vedge 100 » Version: N/A

cpe:2.3:h:cisco:vedge_100:-
Cisco » Vedge 2000 » Version: N/A

cpe:2.3:h:cisco:vedge_2000:-
Cisco » Vedge 5000 » Version: N/A

cpe:2.3:h:cisco:vedge_5000:-
Cisco » Vedge 1000 Firmware » Version: N/A

cpe:2.3:o:cisco:vedge_1000_firmware:-
Cisco » Vedge 1000 Firmware » Version: 16.9

cpe:2.3:o:cisco:vedge_1000_firmware:16.9
Cisco » Vedge 1000 Firmware » Version: 16.9.1

cpe:2.3:o:cisco:vedge_1000_firmware:16.9.1
Cisco » Vedge 1000 Firmware » Version: 16.9.3

cpe:2.3:o:cisco:vedge_1000_firmware:16.9.3
Cisco » Vedge 1000 Firmware » Version: 18.3.0

cpe:2.3:o:cisco:vedge_1000_firmware:18.3.0
Cisco » Vedge 1000 Firmware » Version: 19.2.99

cpe:2.3:o:cisco:vedge_1000_firmware:19.2.99
Cisco » Vedge 1000 Firmware » Version: 20.4

cpe:2.3:o:cisco:vedge_1000_firmware:20.4
Cisco » Vedge 1000 Firmware » Version: 20.4.2

cpe:2.3:o:cisco:vedge_1000_firmware:20.4.2
Cisco » Vedge 1000 Firmware » Version: 20.5

cpe:2.3:o:cisco:vedge_1000_firmware:20.5
Cisco » Vedge 1000 Firmware » Version: 20.5.1

cpe:2.3:o:cisco:vedge_1000_firmware:20.5.1
Cisco » Vedge 100 Firmware » Version: N/A

cpe:2.3:o:cisco:vedge_100_firmware:-
Cisco » Vedge 100 Firmware » Version: 18.3.0

cpe:2.3:o:cisco:vedge_100_firmware:18.3.0
Cisco » Vedge 100 Firmware » Version: 19.2.99

cpe:2.3:o:cisco:vedge_100_firmware:19.2.99
Cisco » Vedge 100 Firmware » Version: 20.4

cpe:2.3:o:cisco:vedge_100_firmware:20.4
Cisco » Vedge 100 Firmware » Version: 20.4.2

cpe:2.3:o:cisco:vedge_100_firmware:20.4.2
Cisco » Vedge 100 Firmware » Version: 20.5

cpe:2.3:o:cisco:vedge_100_firmware:20.5
Cisco » Vedge 100 Firmware » Version: 20.5.1

cpe:2.3:o:cisco:vedge_100_firmware:20.5.1
Cisco » Vedge 2000 Firmware » Version: N/A

cpe:2.3:o:cisco:vedge_2000_firmware:-
Cisco » Vedge 2000 Firmware » Version: 18.3.0

cpe:2.3:o:cisco:vedge_2000_firmware:18.3.0
Cisco » Vedge 2000 Firmware » Version: 19.2.99

cpe:2.3:o:cisco:vedge_2000_firmware:19.2.99
Cisco » Vedge 2000 Firmware » Version: 20.4

cpe:2.3:o:cisco:vedge_2000_firmware:20.4
Cisco » Vedge 2000 Firmware » Version: 20.4.2

cpe:2.3:o:cisco:vedge_2000_firmware:20.4.2
Cisco » Vedge 2000 Firmware » Version: 20.5

cpe:2.3:o:cisco:vedge_2000_firmware:20.5
Cisco » Vedge 2000 Firmware » Version: 20.5.1

cpe:2.3:o:cisco:vedge_2000_firmware:20.5.1
Cisco » Vedge 5000 Firmware » Version: N/A

cpe:2.3:o:cisco:vedge_5000_firmware:-
Cisco » Vedge 5000 Firmware » Version: 18.3.0

cpe:2.3:o:cisco:vedge_5000_firmware:18.3.0
Cisco » Vedge 5000 Firmware » Version: 19.2.0

cpe:2.3:o:cisco:vedge_5000_firmware:19.2.0
Cisco » Vedge 5000 Firmware » Version: 19.2.097

cpe:2.3:o:cisco:vedge_5000_firmware:19.2.097
Cisco » Vedge 5000 Firmware » Version: 19.2.098

cpe:2.3:o:cisco:vedge_5000_firmware:19.2.098
Cisco » Vedge 5000 Firmware » Version: 19.2.1

cpe:2.3:o:cisco:vedge_5000_firmware:19.2.1
Cisco » Vedge 5000 Firmware » Version: 19.2.99

cpe:2.3:o:cisco:vedge_5000_firmware:19.2.99
Cisco » Vedge 5000 Firmware » Version: 20.4

cpe:2.3:o:cisco:vedge_5000_firmware:20.4
Cisco » Vedge 5000 Firmware » Version: 20.4.2

cpe:2.3:o:cisco:vedge_5000_firmware:20.4.2
Cisco » Vedge 5000 Firmware » Version: 20.5

cpe:2.3:o:cisco:vedge_5000_firmware:20.5
Cisco » Vedge 5000 Firmware » Version: 20.5.1

cpe:2.3:o:cisco:vedge_5000_firmware:20.5.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-1648

Products

Pricing

Contact Us