CVE-2019-1839

🗓️ 21 Aug 2019 18:10:17Reported by ciscoType

Vulnerability in Cisco Remote PHY Device Software allowing local attacker to execute commands with root privileges. Improper input sanitization leads to complete system compromise

Reporter	Title	Published	Views	Family All 7
Cisco	Cisco Remote PHY Device Software Command Injection Vulnerability	21 Aug 201916:00	–	cisco
Cvelist	CVE-2019-1839 Cisco Remote PHY Device Software Command Injection Vulnerability	21 Aug 201918:10	–	cvelist
EUVD	EUVD-2019-10396	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1839	21 Aug 201919:15	–	nvd
OSV	CVE-2019-1839	21 Aug 201919:15	–	osv
Prion	Input validation	21 Aug 201919:15	–	prion
Vulnrichment	CVE-2019-1839 Cisco Remote PHY Device Software Command Injection Vulnerability	21 Aug 201918:10	–	vulnrichment

NVD

Node

cisco remote_phy_120_firmwareRange<6.4

AND

cisco remote_phy_120Match-

Node

cisco remote_phy_220_firmwareRange<3.1

AND

cisco remote_phy_220Match-

Node

cisco remote_phy_shelf_7200_firmwareRange<1.2

AND

cisco remote_phy_shelf_7200Match-

Node

cisco cbr-8_firmwareMatch1.1

cisco cbr-8_firmwareMatch6.1

cisco cbr-8_firmwareMatch6.2

AND

cisco cbr-8Match-

[
  {
    "product": "Cisco Remote PHY",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "6.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-rphy

21 Nov 2024 04:37Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.7

CVSS 27.2

CVSS 36.7

EPSS0.00107

SSVC