CVE-2019-12709

🗓️ 25 Sep 2019 20:15:35Reported by ciscoType

A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with root privileges

Reporter	Title	Published	Views	Family All 8
Cisco	Cisco IOS XR Software for Cisco ASR 9000 VMAN CLI Privilege Escalation Vulnerability	25 Sep 201916:00	–	cisco
Tenable Nessus	Cisco IOS XR Software for Cisco ASR 9000 VMAN CLI Privilege Escalation (cisco-sa-20190925-xr-asr9k-privesc)	28 Feb 202000:00	–	nessus
CNVD	Cisco ASR 9000 Series Cisco IOS XR Command Injection Vulnerability	26 Sep 201900:00	–	cnvd
Cvelist	CVE-2019-12709 Cisco IOS XR Software for Cisco ASR 9000 VMAN CLI Privilege Escalation Vulnerability	25 Sep 201920:15	–	cvelist
EUVD	EUVD-2019-4300	7 Oct 202500:30	–	euvd
NVD	CVE-2019-12709	25 Sep 201921:15	–	nvd
Prion	Input validation	25 Sep 201921:15	–	prion
Vulnrichment	CVE-2019-12709 Cisco IOS XR Software for Cisco ASR 9000 VMAN CLI Privilege Escalation Vulnerability	25 Sep 201920:15	–	vulnrichment

NVD

Node

cisco ios_xrRange5.1.0–6.5.3

cisco ios_xrRange6.6.0–6.6.2

AND

cisco asr_9000vMatch-

cisco asr_9001Match-

cisco asr_9006Match-

cisco asr_9010Match-

cisco asr_9901Match-

cisco asr_9904Match-

cisco asr_9906Match-

cisco asr_9910Match-

cisco asr_9912Match-

cisco asr_9922Match-

[
  {
    "product": "Cisco IOS XR Software",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-xr-asr9k-privesc

21 Nov 2024 04:23Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.7

CVSS 27.2

CVSS 36.7

EPSS0.00048

SSVC

CWE-78