CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-1650

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the save command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the save command in the CLI of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying operating system of an affected device and escalate their privileges to the root user.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.018

EPSS Ranking 81.6%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.0

References

Products affected by CVE-2019-1650

Cisco » Sd-Wan » Version: N/A

cpe:2.3:a:cisco:sd-wan:-
Cisco » Sd-Wan » Version: 16.2.0

cpe:2.3:a:cisco:sd-wan:16.2.0
Cisco » Sd-Wan » Version: 16.2.1

cpe:2.3:a:cisco:sd-wan:16.2.1
Cisco » Sd-Wan » Version: 16.2.10

cpe:2.3:a:cisco:sd-wan:16.2.10
Cisco » Sd-Wan » Version: 16.2.11

cpe:2.3:a:cisco:sd-wan:16.2.11
Cisco » Sd-Wan » Version: 16.2.12

cpe:2.3:a:cisco:sd-wan:16.2.12
Cisco » Sd-Wan » Version: 16.2.13

cpe:2.3:a:cisco:sd-wan:16.2.13
Cisco » Sd-Wan » Version: 16.2.14

cpe:2.3:a:cisco:sd-wan:16.2.14
Cisco » Sd-Wan » Version: 16.2.2

cpe:2.3:a:cisco:sd-wan:16.2.2
Cisco » Sd-Wan » Version: 16.2.3

cpe:2.3:a:cisco:sd-wan:16.2.3
Cisco » Sd-Wan » Version: 16.2.4

cpe:2.3:a:cisco:sd-wan:16.2.4
Cisco » Sd-Wan » Version: 16.2.5

cpe:2.3:a:cisco:sd-wan:16.2.5
Cisco » Sd-Wan » Version: 16.2.6

cpe:2.3:a:cisco:sd-wan:16.2.6
Cisco » Sd-Wan » Version: 16.2.7

cpe:2.3:a:cisco:sd-wan:16.2.7
Cisco » Sd-Wan » Version: 16.2.8

cpe:2.3:a:cisco:sd-wan:16.2.8
Cisco » Sd-Wan » Version: 16.2.9

cpe:2.3:a:cisco:sd-wan:16.2.9
Cisco » Sd-Wan » Version: 16.3.0

cpe:2.3:a:cisco:sd-wan:16.3.0
Cisco » Sd-Wan » Version: 16.3.1

cpe:2.3:a:cisco:sd-wan:16.3.1
Cisco » Sd-Wan » Version: 16.3.2

cpe:2.3:a:cisco:sd-wan:16.3.2
Cisco » Sd-Wan » Version: 16.3.3

cpe:2.3:a:cisco:sd-wan:16.3.3
Cisco » Sd-Wan » Version: 17.1.0

cpe:2.3:a:cisco:sd-wan:17.1.0
Cisco » Sd-Wan » Version: 17.1.1

cpe:2.3:a:cisco:sd-wan:17.1.1
Cisco » Sd-Wan » Version: 17.1.2

cpe:2.3:a:cisco:sd-wan:17.1.2
Cisco » Sd-Wan » Version: 17.1.3

cpe:2.3:a:cisco:sd-wan:17.1.3
Cisco » Sd-Wan » Version: 17.1.4

cpe:2.3:a:cisco:sd-wan:17.1.4
Cisco » Sd-Wan » Version: 17.1.5

cpe:2.3:a:cisco:sd-wan:17.1.5
Cisco » Sd-Wan » Version: 17.2.0

cpe:2.3:a:cisco:sd-wan:17.2.0
Cisco » Sd-Wan » Version: 17.2.1

cpe:2.3:a:cisco:sd-wan:17.2.1
Cisco » Sd-Wan » Version: 17.2.2

cpe:2.3:a:cisco:sd-wan:17.2.2
Cisco » Sd-Wan » Version: 17.2.3

cpe:2.3:a:cisco:sd-wan:17.2.3
Cisco » Sd-Wan » Version: 17.2.4

cpe:2.3:a:cisco:sd-wan:17.2.4
Cisco » Sd-Wan » Version: 17.2.5

cpe:2.3:a:cisco:sd-wan:17.2.5
Cisco » Sd-Wan » Version: 17.2.6

cpe:2.3:a:cisco:sd-wan:17.2.6
Cisco » Sd-Wan » Version: 17.2.7

cpe:2.3:a:cisco:sd-wan:17.2.7
Cisco » Sd-Wan » Version: 17.2.8

cpe:2.3:a:cisco:sd-wan:17.2.8
Cisco » Sd-Wan » Version: 17.2.9

cpe:2.3:a:cisco:sd-wan:17.2.9
Cisco » Sd-Wan » Version: 18.1.0

cpe:2.3:a:cisco:sd-wan:18.1.0
Cisco » Sd-Wan » Version: 18.1.1

cpe:2.3:a:cisco:sd-wan:18.1.1
Cisco » Sd-Wan » Version: 18.2.0

cpe:2.3:a:cisco:sd-wan:18.2.0
Cisco » Sd-Wan » Version: 18.3.0

cpe:2.3:a:cisco:sd-wan:18.3.0
Cisco » Sd-Wan » Version: 18.3.1

cpe:2.3:a:cisco:sd-wan:18.3.1
Cisco » Sd-Wan » Version: 18.3.2

cpe:2.3:a:cisco:sd-wan:18.3.2
Cisco » Sd-Wan » Version: 18.3.3

cpe:2.3:a:cisco:sd-wan:18.3.3
Cisco » Sd-Wan » Version: 18.3.4

cpe:2.3:a:cisco:sd-wan:18.3.4
Cisco » Sd-Wan » Version: 18.3.5

cpe:2.3:a:cisco:sd-wan:18.3.5
Cisco » Sd-Wan » Version: 18.3.6

cpe:2.3:a:cisco:sd-wan:18.3.6
Cisco » Sd-Wan » Version: 18.3.8

cpe:2.3:a:cisco:sd-wan:18.3.8
Cisco » Vbond Orchestrator » Version: N/A

cpe:2.3:a:cisco:vbond_orchestrator:-
Cisco » Vmanage Network Management » Version: N/A

cpe:2.3:a:cisco:vmanage_network_management:-
Cisco » Vsmart Controller » Version: N/A

cpe:2.3:a:cisco:vsmart_controller:-
Cisco » Vedge 1000 » Version: N/A

cpe:2.3:h:cisco:vedge_1000:-
Cisco » Vedge 100 » Version: N/A

cpe:2.3:h:cisco:vedge_100:-
Cisco » Vedge 2000 » Version: N/A

cpe:2.3:h:cisco:vedge_2000:-
Cisco » Vedge 5000 » Version: N/A

cpe:2.3:h:cisco:vedge_5000:-
Cisco » Vedge 1000 Firmware » Version: N/A

cpe:2.3:o:cisco:vedge_1000_firmware:-
Cisco » Vedge 1000 Firmware » Version: 16.9

cpe:2.3:o:cisco:vedge_1000_firmware:16.9
Cisco » Vedge 1000 Firmware » Version: 16.9.1

cpe:2.3:o:cisco:vedge_1000_firmware:16.9.1
Cisco » Vedge 1000 Firmware » Version: 16.9.3

cpe:2.3:o:cisco:vedge_1000_firmware:16.9.3
Cisco » Vedge 1000 Firmware » Version: 18.3.0

cpe:2.3:o:cisco:vedge_1000_firmware:18.3.0
Cisco » Vedge 1000 Firmware » Version: 19.2.99

cpe:2.3:o:cisco:vedge_1000_firmware:19.2.99
Cisco » Vedge 1000 Firmware » Version: 20.4

cpe:2.3:o:cisco:vedge_1000_firmware:20.4
Cisco » Vedge 1000 Firmware » Version: 20.4.2

cpe:2.3:o:cisco:vedge_1000_firmware:20.4.2
Cisco » Vedge 1000 Firmware » Version: 20.5

cpe:2.3:o:cisco:vedge_1000_firmware:20.5
Cisco » Vedge 1000 Firmware » Version: 20.5.1

cpe:2.3:o:cisco:vedge_1000_firmware:20.5.1
Cisco » Vedge 100 Firmware » Version: N/A

cpe:2.3:o:cisco:vedge_100_firmware:-
Cisco » Vedge 100 Firmware » Version: 18.3.0

cpe:2.3:o:cisco:vedge_100_firmware:18.3.0
Cisco » Vedge 100 Firmware » Version: 19.2.99

cpe:2.3:o:cisco:vedge_100_firmware:19.2.99
Cisco » Vedge 100 Firmware » Version: 20.4

cpe:2.3:o:cisco:vedge_100_firmware:20.4
Cisco » Vedge 100 Firmware » Version: 20.4.2

cpe:2.3:o:cisco:vedge_100_firmware:20.4.2
Cisco » Vedge 100 Firmware » Version: 20.5

cpe:2.3:o:cisco:vedge_100_firmware:20.5
Cisco » Vedge 100 Firmware » Version: 20.5.1

cpe:2.3:o:cisco:vedge_100_firmware:20.5.1
Cisco » Vedge 2000 Firmware » Version: N/A

cpe:2.3:o:cisco:vedge_2000_firmware:-
Cisco » Vedge 2000 Firmware » Version: 18.3.0

cpe:2.3:o:cisco:vedge_2000_firmware:18.3.0
Cisco » Vedge 2000 Firmware » Version: 19.2.99

cpe:2.3:o:cisco:vedge_2000_firmware:19.2.99
Cisco » Vedge 2000 Firmware » Version: 20.4

cpe:2.3:o:cisco:vedge_2000_firmware:20.4
Cisco » Vedge 2000 Firmware » Version: 20.4.2

cpe:2.3:o:cisco:vedge_2000_firmware:20.4.2
Cisco » Vedge 2000 Firmware » Version: 20.5

cpe:2.3:o:cisco:vedge_2000_firmware:20.5
Cisco » Vedge 2000 Firmware » Version: 20.5.1

cpe:2.3:o:cisco:vedge_2000_firmware:20.5.1
Cisco » Vedge 5000 Firmware » Version: N/A

cpe:2.3:o:cisco:vedge_5000_firmware:-
Cisco » Vedge 5000 Firmware » Version: 18.3.0

cpe:2.3:o:cisco:vedge_5000_firmware:18.3.0
Cisco » Vedge 5000 Firmware » Version: 19.2.0

cpe:2.3:o:cisco:vedge_5000_firmware:19.2.0
Cisco » Vedge 5000 Firmware » Version: 19.2.097

cpe:2.3:o:cisco:vedge_5000_firmware:19.2.097
Cisco » Vedge 5000 Firmware » Version: 19.2.098

cpe:2.3:o:cisco:vedge_5000_firmware:19.2.098
Cisco » Vedge 5000 Firmware » Version: 19.2.1

cpe:2.3:o:cisco:vedge_5000_firmware:19.2.1
Cisco » Vedge 5000 Firmware » Version: 19.2.99

cpe:2.3:o:cisco:vedge_5000_firmware:19.2.99
Cisco » Vedge 5000 Firmware » Version: 20.4

cpe:2.3:o:cisco:vedge_5000_firmware:20.4
Cisco » Vedge 5000 Firmware » Version: 20.4.2

cpe:2.3:o:cisco:vedge_5000_firmware:20.4.2
Cisco » Vedge 5000 Firmware » Version: 20.5

cpe:2.3:o:cisco:vedge_5000_firmware:20.5
Cisco » Vedge 5000 Firmware » Version: 20.5.1

cpe:2.3:o:cisco:vedge_5000_firmware:20.5.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-1650

Products

Pricing

Contact Us