7.8
Élevée
CVE-2019-1648 A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local…
Description
A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the group configuration. An attacker could exploit this vulnerability by writing a crafted file to the directory where the user group configuration is located in the underlying operating system. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco SD-WAN Solution | Versions non publiées |
Références
- 20190123 Cisco SD-WAN Solution Privilege Escalation Vulnerability tools.cisco.com
- 106719 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco SD-WAN Solution
Les 55 CVE de Cisco SD-WAN Solution →
CVE-2023-20262
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to…
5.3
Moyenne
CVE-2022-20850
A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an…
5.5
Moyenne
CVE-2022-20818
Cisco SD-WAN Software Privilege Escalation Vulnerabilities
7.8
Élevée
CVE-2022-20775
Cisco SD-WAN Path Traversal Vulnerability
7.8
Élevée