Vulnslist

find the latest Cisco vulnerabilities

CVE-2019-1625

A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow the attacker to make configuration changes to the system as the root user.

SeverityHIGH
CVSS7.8
CWECWE-264
KEV
Published
Modified

Related Products

Product Advisory Evidence
Cisco SD-WAN Solution cisco-sa-20190619-sdwan-privesca Cisco OpenVuln
Cisco Catalyst SD-WAN cisco-sa-20190619-sdwan-privesca Cisco OpenVuln