The vulnerability of the Cisco IOS XE operating system, which allows a hacker to execute arbitrary commands with elevated privileges

🗓️ 12 Apr 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Cisco IOS XE flaw lets authenticated attackers execute arbitrary commands with elevated privileges via crafted inputs.

Reporter	Title	Published	Views	Family All 10
Cisco	Cisco IOS XE Software Command Injection Vulnerability	27 Mar 201916:00	–	cisco
Tenable Nessus	Cisco IOS XE Software Command Injection Vulnerability	21 Aug 201900:00	–	nessus
CVE	CVE-2019-1745	27 Mar 201923:40	–	cve
Cvelist	CVE-2019-1745 Cisco IOS XE Software Command Injection Vulnerability	27 Mar 201923:40	–	cvelist
EUVD	EUVD-2019-10302	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1745	28 Mar 201900:29	–	nvd
OSV	CVE-2019-1745	28 Mar 201900:29	–	osv
Prion	Input validation	28 Mar 201900:29	–	prion
ThreatPost	Cisco Releases Flood of Patches for IOS XE, But Leaves Some Routers Open to Attack	27 Mar 201921:48	–	threatpost
Vulnrichment	CVE-2019-1745 Cisco IOS XE Software Command Injection Vulnerability	27 Mar 201923:40	–	vulnrichment

Vulners

Node

cisco_systems cisco_ios_xeMatch3.10.8as

OR

cisco_systems cisco_ios_xeMatch3.12.0s

OR

cisco_systems cisco_ios_xeMatch3.12.1s

OR

cisco_systems cisco_ios_xeMatch3.12.2s

OR

cisco_systems cisco_ios_xeMatch3.12.3s

OR

cisco_systems cisco_ios_xeMatch3.12.4s

OR

cisco_systems cisco_ios_xeMatch3.13.1s

OR

cisco_systems cisco_ios_xeMatch3.13.2s

OR

cisco_systems cisco_ios_xeMatch3.13.4s

OR

cisco_systems cisco_ios_xeMatch3.14.0s

OR

cisco_systems cisco_ios_xeMatch3.14.1s

OR

cisco_systems cisco_ios_xeMatch3.14.2s

OR

cisco_systems cisco_ios_xeMatch3.14.3s

OR

cisco_systems cisco_ios_xeMatch3.14.4s

OR

cisco_systems cisco_ios_xeMatch3.15.0s

OR

cisco_systems cisco_ios_xeMatch3.15.1s

OR

cisco_systems cisco_ios_xeMatch3.15.2s

OR

cisco_systems cisco_ios_xeMatch3.15.3s

OR

cisco_systems cisco_ios_xeMatch3.16.1as

OR

cisco_systems cisco_ios_xeMatch3.16.2as

OR

cisco_systems cisco_ios_xeMatch3.16.2s

OR

cisco_systems cisco_ios_xeMatch3.17.0s

OR

cisco_systems cisco_ios_xeMatch3.17.1s

OR

cisco_systems cisco_ios_xeMatch3.18.0s

OR

cisco_systems cisco_ios_xeMatch16.5.1

OR

cisco_systems cisco_ios_xeMatch16.1.1

OR

cisco_systems cisco_ios_xeMatch16.1.2

OR

cisco_systems cisco_ios_xeMatch16.1.3

OR

cisco_systems cisco_ios_xeMatch16.3.1a

OR

cisco_systems cisco_ios_xeMatch16.5.1a

OR

cisco_systems cisco_ios_xeMatch16.2.1

OR

cisco_systems cisco_ios_xeMatch16.2.2

OR

cisco_systems cisco_ios_xeMatch16.3.1

OR

cisco_systems cisco_ios_xeMatch16.3.2

OR

cisco_systems cisco_ios_xeMatch16.3.3

OR

cisco_systems cisco_ios_xeMatch16.3.4

OR

cisco_systems cisco_ios_xeMatch16.3.5

OR

cisco_systems cisco_ios_xeMatch16.3.5b

OR

cisco_systems cisco_ios_xeMatch16.4.1

OR

cisco_systems cisco_ios_xeMatch16.6.1

OR

cisco_systems cisco_ios_xeMatch16.6.4

OR

cisco_systems cisco_ios_xeMatch16.7.1b

OR

cisco_systems cisco_ios_xeMatch16.4.3

OR

cisco_systems cisco_ios_xeMatch16.7.2

OR

cisco_systems cisco_ios_xeMatch3.10.0s

OR

cisco_systems cisco_ios_xeMatch3.10.1s

OR

cisco_systems cisco_ios_xeMatch3.10.2s

OR

cisco_systems cisco_ios_xeMatch3.10.3s

OR

cisco_systems cisco_ios_xeMatch3.10.4s

OR

cisco_systems cisco_ios_xeMatch3.10.5s

OR

cisco_systems cisco_ios_xeMatch3.10.6s

OR

cisco_systems cisco_ios_xeMatch3.10.2as

OR

cisco_systems cisco_ios_xeMatch3.10.2ts

OR

cisco_systems cisco_ios_xeMatch3.10.7s

OR

cisco_systems cisco_ios_xeMatch3.10.9s

OR

cisco_systems cisco_ios_xeMatch3.10.10s

OR

cisco_systems cisco_ios_xeMatch3.11.1s

OR

cisco_systems cisco_ios_xeMatch3.11.2s

OR

cisco_systems cisco_ios_xeMatch3.11.0s

OR

cisco_systems cisco_ios_xeMatch3.11.3s

OR

cisco_systems cisco_ios_xeMatch3.11.4s

OR

cisco_systems cisco_ios_xeMatch3.12.0as

OR

cisco_systems cisco_ios_xeMatch3.13.0s

OR

cisco_systems cisco_ios_xeMatch3.13.3s

OR

cisco_systems cisco_ios_xeMatch3.13.5as

OR

cisco_systems cisco_ios_xeMatch3.13.6s

OR

cisco_systems cisco_ios_xeMatch3.13.7s

OR

cisco_systems cisco_ios_xeMatch3.13.6as

OR

cisco_systems cisco_ios_xeMatch3.13.6bs

OR

cisco_systems cisco_ios_xeMatch3.13.8s

OR

cisco_systems cisco_ios_xeMatch3.13.9s

OR

cisco_systems cisco_ios_xeMatch3.15.1cs

OR

cisco_systems cisco_ios_xeMatch3.15.4s

OR

cisco_systems cisco_ios_xeMatch3.16.1s

OR

cisco_systems cisco_ios_xeMatch3.16.0bs

OR

cisco_systems cisco_ios_xeMatch3.16.0cs

OR

cisco_systems cisco_ios_xeMatch3.16.3s

OR

cisco_systems cisco_ios_xeMatch3.16.2bs

OR

cisco_systems cisco_ios_xeMatch3.16.4as

OR

cisco_systems cisco_ios_xeMatch3.16.4bs

OR

cisco_systems cisco_ios_xeMatch3.16.4gs

OR

cisco_systems cisco_ios_xeMatch3.16.5s

OR

cisco_systems cisco_ios_xeMatch3.16.4cs

OR

cisco_systems cisco_ios_xeMatch3.16.4ds

OR

cisco_systems cisco_ios_xeMatch3.16.4es

OR

cisco_systems cisco_ios_xeMatch3.16.6s

OR

cisco_systems cisco_ios_xeMatch3.16.5as

OR

cisco_systems cisco_ios_xeMatch3.16.5bs

OR

cisco_systems cisco_ios_xeMatch3.16.7s

OR

cisco_systems cisco_ios_xeMatch3.16.6bs

OR

cisco_systems cisco_ios_xeMatch3.16.7as

OR

cisco_systems cisco_ios_xeMatch3.16.7bs

OR

cisco_systems cisco_ios_xeMatch3.17.2s

OR

cisco_systems cisco_ios_xeMatch3.17.1as

OR

cisco_systems cisco_ios_xeMatch3.17.3s

OR

cisco_systems cisco_ios_xeMatch3.17.4s

OR

cisco_systems cisco_ios_xeMatch16.3.6

OR

cisco_systems cisco_ios_xeMatch16.4.2

OR

cisco_systems cisco_ios_xeMatch16.5.1b

OR

cisco_systems cisco_ios_xeMatch16.5.2

OR

cisco_systems cisco_ios_xeMatch16.5.3

OR

cisco_systems cisco_ios_xeMatch16.6.2

OR

cisco_systems cisco_ios_xeMatch16.6.3

OR

cisco_systems cisco_ios_xeMatch16.7.1

OR

cisco_systems cisco_ios_xeMatch16.7.1a

OR

cisco_systems cisco_ios_xeMatch16.8.1

OR

cisco_systems cisco_ios_xeMatch16.8.1s

OR

cisco_systems cisco_ios_xeMatch16.9.1b

OR

cisco_systems cisco_ios_xeMatch3.13.10s

OR

cisco_systems cisco_ios_xeMatch3.6.10e

OR

cisco_systems cisco_ios_xeMatch3.16.0as

OR

cisco_systems cisco_ios_xeMatch3.16.3as

OR

cisco_systems cisco_ios_xeMatch3.16.4s

OR

cisco_systems cisco_ios_xeMatch3.16.8s

OR

cisco_systems cisco_ios_xeMatch16.3.7

OR

cisco_systems cisco_ios_xeMatch3.18.0as

OR

cisco_systems cisco_ios_xeMatch3.18.1s

OR

cisco_systems cisco_ios_xeMatch3.18.2s

OR

cisco_systems cisco_ios_xeMatch3.18.3s

OR

cisco_systems cisco_ios_xeMatch3.18.4s

OR

cisco_systems cisco_ios_xeMatch3.18.0sp

OR

cisco_systems cisco_ios_xeMatch3.18.1sp

OR

cisco_systems cisco_ios_xeMatch3.18.1asp

OR

cisco_systems cisco_ios_xeMatch3.18.1gsp

OR

cisco_systems cisco_ios_xeMatch3.18.1bsp

OR

cisco_systems cisco_ios_xeMatch3.18.1csp

OR

cisco_systems cisco_ios_xeMatch3.18.2sp

OR

cisco_systems cisco_ios_xeMatch3.18.1hsp

OR

cisco_systems cisco_ios_xeMatch3.18.2asp

OR

cisco_systems cisco_ios_xeMatch3.18.1isp

OR

cisco_systems cisco_ios_xeMatch3.18.3sp

OR

cisco_systems cisco_ios_xeMatch3.18.4sp

OR

cisco_systems cisco_ios_xeMatch3.18.3asp

OR

cisco_systems cisco_ios_xeMatch3.18.3bsp

OR

cisco_systems cisco_ios_xeMatch3.18.5sp

OR

cisco_systems cisco_ios_xeMatch16.6.4s

OR

cisco_systems cisco_ios_xeMatch16.6.4a

OR

cisco_systems cisco_ios_xeMatch16.8.1b

OR

cisco_systems cisco_ios_xeMatch16.8.1a

OR

cisco_systems cisco_ios_xeMatch16.8.1c

OR

cisco_systems cisco_ios_xeMatch16.8.1d

OR

cisco_systems cisco_ios_xeMatch16.8.2

OR

cisco_systems cisco_ios_xeMatch16.8.1e

OR

cisco_systems cisco_ios_xeMatch16.9.1

OR

cisco_systems cisco_ios_xeMatch16.9.2

OR

cisco_systems cisco_ios_xeMatch16.9.1a

OR

cisco_systems cisco_ios_xeMatch16.9.1s

OR

cisco_systems cisco_ios_xeMatch16.9.1c

OR

cisco_systems cisco_ios_xeMatch16.9.1d

OR

cisco_systems cisco_ios_xeMatch16.9.2a

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-xecmd
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 27.2

CVSS 37.8

EPSS0.00446

Cisco IOS XE vulnerability authenticated access arbitrary command execution elevated privileges crafted inputs