CVE-2019-1626

A vulnerability in the vManage web-based UI (Web UI) of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage device. The vulnerability is due to a failure to properly authorize certain user actions in the device configuration. An attacker could exploit this vulnerability by logging in to the vManage Web UI and sending crafted HTTP requests to vManage. A successful exploit could allow attackers to gain elevated privileges and make changes to the configuration that they would not normally be authorized to make.

CVSS v3 8.8 HIGH
CVSS v2.0 6.5 MEDIUM

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/108838	Third Party Advisory VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-sdwan-privilescal	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:cisco:vedge-100:-:::::::*
	cpe:2.3:h:cisco:vedge-1000:-:::::::*
	cpe:2.3:h:cisco:vedge-100b:-:::::::*
	cpe:2.3:h:cisco:vedge-2000:-:::::::*
	cpe:2.3:h:cisco:vedge-5000:-:::::::*
	cpe:2.3:h:cisco:vedge_100m:-:::::::*
	cpe:2.3:h:cisco:vedge_100wm:-:::::::*

History

No history.

Information

Published : 2019-06-20 03:15

Updated : 2023-12-10 12:59

NVD link : CVE-2019-1626

Mitre link : CVE-2019-1626

CVE.ORG link : CVE-2019-1626

JSON object : View

Products Affected

cisco

vedge-100
vedge-2000
vedge_100m
vedge_100wm
vedge-1000
vedge-5000
sd-wan_firmware
vedge-100b

CWE

CWE-863

Incorrect Authorization

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2019-1626", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2019-06-20T03:15:11.433", "references": [{"url": "http://www.securityfocus.com/bid/108838", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-sdwan-privilescal", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the vManage web-based UI (Web UI) of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage device. The vulnerability is due to a failure to properly authorize certain user actions in the device configuration. An attacker could exploit this vulnerability by logging in to the vManage Web UI and sending crafted HTTP requests to vManage. A successful exploit could allow attackers to gain elevated privileges and make changes to the configuration that they would not normally be authorized to make."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de usuario basada en web (Web UI) de vManage de SD-WAN Solution de Cisco, podr\u00eda permitir a un atacante remoto autenticado obtener privilegios elevados en un dispositivo vManage afectado. Una vulnerabilidad es debido a un fallo al no autorizar apropiadamente ciertas acciones del usuario en la configuraci\u00f3n del dispositivo. Un atacante podr\u00eda explotar esta vulnerabilidad iniciando sesi\u00f3n en la interfaz de usuario web de vManage y enviando peticiones HTTP creadas hacia vManage. Una explotaci\u00f3n con \u00e9xito podr\u00eda permitir a los atacantes obtener privilegios elevados y realizar cambios en la configuraci\u00f3n que regularmente no estar\u00edan autorizados a realizar."}], "lastModified": "2020-10-06T19:53:26.710", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34DA4069-51E1-41F3-8643-E7436C0DAC6D", "versionEndIncluding": "18.3.6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:vedge-100:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5D71E4AF-6E91-4493-A591-4D056D0E59C1"}, {"criteria": "cpe:2.3:h:cisco:vedge-1000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F718A859-BCDB-4DD0-819D-60ABE710F0A9"}, {"criteria": "cpe:2.3:h:cisco:vedge-100b:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "07E7851F-3E72-4677-B907-CF777EBED2FF"}, {"criteria": "cpe:2.3:h:cisco:vedge-2000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "52EEF288-492C-4CE6-A082-631005C5E711"}, {"criteria": "cpe:2.3:h:cisco:vedge-5000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C0C5E2C9-7D4B-405C-93DD-33DF265131E2"}, {"criteria": "cpe:2.3:h:cisco:vedge_100m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "36973815-F46D-4ADA-B9DF-BCB70AC60BD3"}, {"criteria": "cpe:2.3:h:cisco:vedge_100wm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "061A302C-8D35-4E80-93DA-916DA7E90C06"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ykramarz@cisco.com"}