CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-1682

A vulnerability in the FUSE filesystem functionality for Cisco Application Policy Infrastructure Controller (APIC) software could allow an authenticated, local attacker to escalate privileges to root on an affected device. The vulnerability is due to insufficient input validation for certain command strings issued on the CLI of the affected device. An attacker with write permissions for files within a readable folder on the device could alter certain definitions in the affected file. A successful exploit could allow an attacker to cause the underlying FUSE driver to execute said crafted commands, elevating the attacker's privileges to root on an affected device.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 12.7%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 7.2

References

Products affected by CVE-2019-1682

Cisco » Application Policy Infrastructure Controller » Version: N/A

cpe:2.3:a:cisco:application_policy_infrastructure_controller:-
Cisco » Application Policy Infrastructure Controller » Version: 1.0(1e)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(1e)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(1h)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(1h)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(1k)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(1k)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(1n)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(1n)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(2j)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(2j)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(2m)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(2m)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(3f)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(3f)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(3i)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(3i)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(3k)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(3k)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(3n)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(3n)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(3o)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(3o)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(4h)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(4h)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(4o)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(4o)
Cisco » Application Policy Infrastructure Controller » Version: 1.0(4q)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.0(4q)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(0.920a)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(0.920a)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(0c)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(0c)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(1j)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(1j)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(1o)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(1o)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(1r)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(1r)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(1s)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(1s)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(2h)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(2h)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(2i)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(2i)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(3f)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(3f)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(4e)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(4e)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(4f)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(4f)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(4g)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(4g)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(4i)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(4i)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(4l)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(4l)
Cisco » Application Policy Infrastructure Controller » Version: 1.1(4m)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1(4m)
Cisco » Application Policy Infrastructure Controller » Version: 1.1.3

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1.3
Cisco » Application Policy Infrastructure Controller » Version: 1.2(1m)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2(1m)
Cisco » Application Policy Infrastructure Controller » Version: 1.2(2)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2(2)
Cisco » Application Policy Infrastructure Controller » Version: 1.2(2i)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2(2i)
Cisco » Application Policy Infrastructure Controller » Version: 1.2(2j)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2(2j)
Cisco » Application Policy Infrastructure Controller » Version: 1.2(3)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2(3)
Cisco » Application Policy Infrastructure Controller » Version: 1.2(3h)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2(3h)
Cisco » Application Policy Infrastructure Controller » Version: 1.2(3m)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2(3m)
Cisco » Application Policy Infrastructure Controller » Version: 1.2.2

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2.2
Cisco » Application Policy Infrastructure Controller » Version: 1.2_base

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2_base
Cisco » Application Policy Infrastructure Controller » Version: 1.3(1)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3(1)
Cisco » Application Policy Infrastructure Controller » Version: 1.3(1i)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3(1i)
Cisco » Application Policy Infrastructure Controller » Version: 1.3(1j)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3(1j)
Cisco » Application Policy Infrastructure Controller » Version: 1.3(2)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3(2)
Cisco » Application Policy Infrastructure Controller » Version: 1.3(2f)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3(2f)
Cisco » Application Policy Infrastructure Controller » Version: 1.3(2h)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3(2h)
Cisco » Application Policy Infrastructure Controller » Version: 1.3(2i)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3(2i)
Cisco » Application Policy Infrastructure Controller » Version: 1.3(2j)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3(2j)
Cisco » Application Policy Infrastructure Controller » Version: 1.3(2k)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3(2k)
Cisco » Application Policy Infrastructure Controller » Version: 2.0(1)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0(1)
Cisco » Application Policy Infrastructure Controller » Version: 2.0(1n)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0(1n)
Cisco » Application Policy Infrastructure Controller » Version: 2.0(1o)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0(1o)
Cisco » Application Policy Infrastructure Controller » Version: 2.0(1p)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0(1p)
Cisco » Application Policy Infrastructure Controller » Version: 2.0(1q)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0(1q)
Cisco » Application Policy Infrastructure Controller » Version: 2.0(1r)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0(1r)
Cisco » Application Policy Infrastructure Controller » Version: 2.0(2f)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0(2f)
Cisco » Application Policy Infrastructure Controller » Version: 2.0(2g)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0(2g)
Cisco » Application Policy Infrastructure Controller » Version: 2.0(2h)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0(2h)
Cisco » Application Policy Infrastructure Controller » Version: 2.0(2l)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0(2l)
Cisco » Application Policy Infrastructure Controller » Version: 2.0(2n)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0(2n)
Cisco » Application Policy Infrastructure Controller » Version: 2.0(2o)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0(2o)
Cisco » Application Policy Infrastructure Controller » Version: 2.0_base

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0_base
Cisco » Application Policy Infrastructure Controller » Version: 2.1(1i)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1(1i)
Cisco » Application Policy Infrastructure Controller » Version: 2.1(2e)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1(2e)
Cisco » Application Policy Infrastructure Controller » Version: 2.1(2g)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1(2g)
Cisco » Application Policy Infrastructure Controller » Version: 2.1(2k)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1(2k)
Cisco » Application Policy Infrastructure Controller » Version: 2.1(3g)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1(3g)
Cisco » Application Policy Infrastructure Controller » Version: 2.1(3h)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1(3h)
Cisco » Application Policy Infrastructure Controller » Version: 2.1(3j)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1(3j)
Cisco » Application Policy Infrastructure Controller » Version: 2.1(4a)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1(4a)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(1o)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(1o)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(2e)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(2e)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(2f)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(2f)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(2j)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(2j)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(2k)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(2k)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(2q)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(2q)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(3j)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(3j)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(3p)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(3p)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(3r)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(3r)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(3s)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(3s)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(3t)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(3t)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(4f)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(4f)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(4p)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(4p)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(4q)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(4q)
Cisco » Application Policy Infrastructure Controller » Version: 2.2(4r)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2(4r)
Cisco » Application Policy Infrastructure Controller » Version: 2.3(1f)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3(1f)
Cisco » Application Policy Infrastructure Controller » Version: 2.3(1i)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3(1i)
Cisco » Application Policy Infrastructure Controller » Version: 2.3(1l)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3(1l)
Cisco » Application Policy Infrastructure Controller » Version: 2.3(1o)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3(1o)
Cisco » Application Policy Infrastructure Controller » Version: 2.3(1p)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3(1p)
Cisco » Application Policy Infrastructure Controller » Version: 3.0(1k)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0(1k)
Cisco » Application Policy Infrastructure Controller » Version: 3.0(2h)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0(2h)
Cisco » Application Policy Infrastructure Controller » Version: 3.0(2k)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0(2k)
Cisco » Application Policy Infrastructure Controller » Version: 3.0(2n)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0(2n)
Cisco » Application Policy Infrastructure Controller » Version: 3.0(3i)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0(3i)
Cisco » Application Policy Infrastructure Controller » Version: 3.1(1i)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1(1i)
Cisco » Application Policy Infrastructure Controller » Version: 3.1(2m)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1(2m)
Cisco » Application Policy Infrastructure Controller » Version: 3.1(2o)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1(2o)
Cisco » Application Policy Infrastructure Controller » Version: 3.1(2p)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1(2p)
Cisco » Application Policy Infrastructure Controller » Version: 3.1(2q)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1(2q)
Cisco » Application Policy Infrastructure Controller » Version: 3.1(2s)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1(2s)
Cisco » Application Policy Infrastructure Controller » Version: 3.1(2t)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1(2t)
Cisco » Application Policy Infrastructure Controller » Version: 3.1(2u)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1(2u)
Cisco » Application Policy Infrastructure Controller » Version: 3.1(2v)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1(2v)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(1l)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(1l)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(1m)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(1m)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(2l)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(2l)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(2o)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(2o)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(3i)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(3i)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(3n)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(3n)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(3o)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(3o)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(3r)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(3r)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(3s)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(3s)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(4d)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(4d)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(4e)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(4e)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(5d)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(5d)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(5e)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(5e)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(5f)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(5f)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(6i)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(6i)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(7f)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(7f)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(7k)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(7k)
Cisco » Application Policy Infrastructure Controller » Version: 3.2(9b)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2(9b)
Cisco » Application Policy Infrastructure Controller » Version: 4.0(1h)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.0(1h)
Cisco » Application Policy Infrastructure Controller » Version: 4.0(2c)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.0(2c)
Cisco » Application Policy Infrastructure Controller » Version: 4.0(3d)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.0(3d)
Cisco » Application Policy Infrastructure Controller » Version: 4.1(0.88a)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1(0.88a)
Cisco » Application Policy Infrastructure Controller » Version: 4.1(0.90a)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1(0.90a)
Cisco » Application Policy Infrastructure Controller » Version: 4.1(1)

cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1(1)

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-1682

Products

Pricing

Contact Us