A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow the attacker to make configuration changes to the system as the root user.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/108844 | Third Party Advisory VDB Entry |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-sdwan-privesca | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
12 Aug 2021, 21:34
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:cisco:edge_100b:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:edge_100wm:-:*:*:*:*:*:*:* |
cpe:2.3:h:cisco:vedge_100wm:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:vedge_100m:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:* |
Information
Published : 2019-06-20 03:15
Updated : 2023-12-10 12:59
NVD link : CVE-2019-1625
Mitre link : CVE-2019-1625
CVE.ORG link : CVE-2019-1625
JSON object : View
Products Affected
cisco
- vedge-100
- vedge-2000
- vedge_100m
- vedge_100wm
- vedge-1000
- vedge-5000
- sd-wan_firmware
- vedge_100b
CWE