CVE-2019-1648

🗓️ 24 Jan 2019 15:00:00Reported by ciscoType

A local attacker could gain elevated privileges on Cisco SD-WAN Solution through a vulnerability in user group configuration

Reporter	Title	Published	Views	Family All 8
Cisco	Cisco SD-WAN Solution Privilege Escalation Vulnerability	23 Jan 201916:00	–	cisco
CNVD	Cisco SD-WAN Solution Privilege Permission and Access Control Vulnerability (CNVD-2020-14721)	29 Jan 201900:00	–	cnvd
Cvelist	CVE-2019-1648 Cisco SD-WAN Solution Privilege Escalation Vulnerability	24 Jan 201915:00	–	cvelist
EUVD	EUVD-2019-10205	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1648	24 Jan 201915:29	–	nvd
OSV	CVE-2019-1648	24 Jan 201915:29	–	osv
Prion	Design/Logic Flaw	24 Jan 201915:29	–	prion
Vulnrichment	CVE-2019-1648 Cisco SD-WAN Solution Privilege Escalation Vulnerability	24 Jan 201915:00	–	vulnrichment

NVD

Node

cisco vedge_100_firmware

AND

cisco vedge_100Match-

Node

cisco vedge_1000_firmware

AND

cisco vedge_1000Match-

Node

cisco vedge_2000_firmware

AND

cisco vedge_2000Match-

Node

cisco vedge_5000_firmware

AND

cisco vedge_5000Match-

Node

cisco sd-wanRange<18.4.0

cisco vbond_orchestratorMatch-

cisco vmanage_network_managementMatch-

cisco vsmart_controllerMatch-

[
  {
    "product": "Cisco SD-WAN Solution",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/106719
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-sdwan-sol-escal

21 Nov 2024 04:37Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 3.17.8

CVSS 37.8

EPSS0.00063

SSVC