6.5
Moyenne
CVE-2019-1755 A vulnerability in the Web Services Management Agent (WSMA) function of Cisco IOS XE Software could allow an…
Description
A vulnerability in the Web Services Management Agent (WSMA) function of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary Cisco IOS commands as a privilege level 15 user. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker could exploit this vulnerability by submitting crafted HTTP requests to the targeted application. A successful exploit could allow the attacker to execute arbitrary commands on the affected device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco IOS XE Software 16.8 | 16.8.1s → 16.8.1 | Pas de correctif indiqué |
| Cisco IOS XE Software 16.7 | 16.7.1a → 16.7.1 | Pas de correctif indiqué |
| Cisco IOS XE Software 16.6 | 16.6.1 → 16.6.3 | Pas de correctif indiqué |
| Cisco IOS XE Software 16.5 | 16.5.1a → 16.5.3 | Pas de correctif indiqué |
| Cisco IOS XE Software 16.4 | 16.4.1 → 16.4.3 | Pas de correctif indiqué |
| Cisco IOS XE Software 16.3 | 16.3.1a → 16.3.8 | Pas de correctif indiqué |
| Cisco IOS XE Software 16.2 | 16.2.1 → 16.2.2 | Pas de correctif indiqué |
| Cisco IOS XE Software 16.1 | 16.1.1 → 16.1.3 | Pas de correctif indiqué |
| Cisco IOS XE Software | 3.6.10E | Pas de correctif indiqué |
Afficher l’autre branche Masquer l’autre branche
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco IOS XE Software | 3.2.0JA | Pas de correctif indiqué |
Références
- 20190327 Cisco IOS XE Software Command Injection Vulnerability tools.cisco.com
- 107380 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco IOS XE Software
Les 248 CVE de Cisco IOS XE Software →
CVE-2026-20311
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote…
6.3
Moyenne
CVE-2026-20301
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of…
8.6
Élevée
CVE-2026-20308
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote…
4.3
Moyenne
CVE-2026-20273
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering…
8.6
Élevée