CVE-2019-1745
28.03.2019, 00:29
A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with elevated privileges. The vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected commands. An exploit could allow the attacker to gain root privileges on the affected device.
| Vendor | Product | Version |
|---|---|---|
| cisco | ios_xe | 3.6.10e:e |
| cisco | ios_xe | 3.10.0s:s |
| cisco | ios_xe | 3.10.1s:s |
| cisco | ios_xe | 3.10.2as:as |
| cisco | ios_xe | 3.10.2s:s |
| cisco | ios_xe | 3.10.2ts:ts |
| cisco | ios_xe | 3.10.3s:s |
| cisco | ios_xe | 3.10.4s:s |
| cisco | ios_xe | 3.10.5s:s |
| cisco | ios_xe | 3.10.6s:s |
| cisco | ios_xe | 3.10.7s:s |
| cisco | ios_xe | 3.10.8as:as |
| cisco | ios_xe | 3.10.8s:s |
| cisco | ios_xe | 3.10.9s:s |
| cisco | ios_xe | 3.10.10s:s |
| cisco | ios_xe | 3.11.0s:s |
| cisco | ios_xe | 3.11.1s:s |
| cisco | ios_xe | 3.11.2s:s |
| cisco | ios_xe | 3.11.3s:s |
| cisco | ios_xe | 3.11.4s:s |
| cisco | ios_xe | 3.12.0as:as |
| cisco | ios_xe | 3.12.0s:s |
| cisco | ios_xe | 3.12.1s:s |
| cisco | ios_xe | 3.12.2s:s |
| cisco | ios_xe | 3.12.3s:s |
| cisco | ios_xe | 3.12.4s:s |
| cisco | ios_xe | 3.13.0as:as |
| cisco | ios_xe | 3.13.0s:s |
| cisco | ios_xe | 3.13.1s:s |
| cisco | ios_xe | 3.13.2as:as |
| cisco | ios_xe | 3.13.2s:s |
| cisco | ios_xe | 3.13.3s:s |
| cisco | ios_xe | 3.13.4s:s |
| cisco | ios_xe | 3.13.5as:as |
| cisco | ios_xe | 3.13.5s:s |
| cisco | ios_xe | 3.13.6as:as |
| cisco | ios_xe | 3.13.6bs:bs |
| cisco | ios_xe | 3.13.6s:s |
| cisco | ios_xe | 3.13.7as:as |
| cisco | ios_xe | 3.13.7s:s |
| cisco | ios_xe | 3.13.8s:s |
| cisco | ios_xe | 3.13.9s:s |
| cisco | ios_xe | 3.13.10s:s |
| cisco | ios_xe | 3.14.0s:s |
| cisco | ios_xe | 3.14.1s:s |
| cisco | ios_xe | 3.14.2s:s |
| cisco | ios_xe | 3.14.3s:s |
| cisco | ios_xe | 3.14.4s:s |
| cisco | ios_xe | 3.15.0s:s |
| cisco | ios_xe | 3.15.1cs:cs |
| cisco | ios_xe | 3.15.1s:s |
| cisco | ios_xe | 3.15.2s:s |
| cisco | ios_xe | 3.15.3s:s |
| cisco | ios_xe | 3.15.4s:s |
| cisco | ios_xe | 3.16.0as:as |
| cisco | ios_xe | 3.16.0bs:bs |
| cisco | ios_xe | 3.16.0cs:cs |
| cisco | ios_xe | 3.16.0s:s |
| cisco | ios_xe | 3.16.1as:as |
| cisco | ios_xe | 3.16.1s:s |
| cisco | ios_xe | 3.16.2as:as |
| cisco | ios_xe | 3.16.2bs:bs |
| cisco | ios_xe | 3.16.2s:s |
| cisco | ios_xe | 3.16.3as:as |
| cisco | ios_xe | 3.16.3s:s |
| cisco | ios_xe | 3.16.4as:as |
| cisco | ios_xe | 3.16.4bs:bs |
| cisco | ios_xe | 3.16.4cs:cs |
| cisco | ios_xe | 3.16.4ds:ds |
| cisco | ios_xe | 3.16.4es:es |
| cisco | ios_xe | 3.16.4gs:gs |
| cisco | ios_xe | 3.16.4s:s |
| cisco | ios_xe | 3.16.5as:as |
| cisco | ios_xe | 3.16.5bs:bs |
| cisco | ios_xe | 3.16.5s:s |
| cisco | ios_xe | 3.16.6bs:bs |
| cisco | ios_xe | 3.16.6s:s |
| cisco | ios_xe | 3.16.7as:as |
| cisco | ios_xe | 3.16.7bs:bs |
| cisco | ios_xe | 3.16.7s:s |
| cisco | ios_xe | 3.16.8s:s |
| cisco | ios_xe | 3.17.0s:s |
| cisco | ios_xe | 3.17.1as:as |
| cisco | ios_xe | 3.17.1s:s |
| cisco | ios_xe | 3.17.3s:s |
| cisco | ios_xe | 3.17.4s:s |
| cisco | ios_xe | 3.18.0as:as |
| cisco | ios_xe | 3.18.0s:s |
| cisco | ios_xe | 3.18.0sp:sp |
| cisco | ios_xe | 3.18.1asp:asp |
| cisco | ios_xe | 3.18.1bsp:bsp |
| cisco | ios_xe | 3.18.1csp:csp |
| cisco | ios_xe | 3.18.1gsp:gsp |
| cisco | ios_xe | 3.18.1hsp:hsp |
| cisco | ios_xe | 3.18.1isp:isp |
| cisco | ios_xe | 3.18.1s:s |
| cisco | ios_xe | 3.18.1sp:sp |
| cisco | ios_xe | 3.18.2asp:asp |
| cisco | ios_xe | 3.18.2s:s |
| cisco | ios_xe | 3.18.2sp:sp |
| cisco | ios_xe | 3.18.3asp:asp |
| cisco | ios_xe | 3.18.3bsp:bsp |
| cisco | ios_xe | 3.18.3s:s |
| cisco | ios_xe | 3.18.3sp:sp |
| cisco | ios_xe | 3.18.4s:s |
| cisco | ios_xe | 3.18.4sp:sp |
| cisco | ios_xe | 3.18.5sp:sp |
| cisco | ios_xe | 16.1.1 |
| cisco | ios_xe | 16.1.2 |
| cisco | ios_xe | 16.1.3 |
| cisco | ios_xe | 16.2.1 |
| cisco | ios_xe | 16.2.2 |
| cisco | ios_xe | 16.3.1 |
| cisco | ios_xe | 16.3.1a:a |
| cisco | ios_xe | 16.3.2 |
| cisco | ios_xe | 16.3.3 |
| cisco | ios_xe | 16.3.4 |
| cisco | ios_xe | 16.3.5 |
| cisco | ios_xe | 16.3.5b:b |
| cisco | ios_xe | 16.3.6 |
| cisco | ios_xe | 16.3.7 |
| cisco | ios_xe | 16.4.1 |
| cisco | ios_xe | 16.4.2 |
| cisco | ios_xe | 16.4.3 |
| cisco | ios_xe | 16.5.1 |
| cisco | ios_xe | 16.5.1a:a |
| cisco | ios_xe | 16.5.1b:b |
| cisco | ios_xe | 16.5.2 |
| cisco | ios_xe | 16.5.3 |
| cisco | ios_xe | 16.6.1 |
| cisco | ios_xe | 16.6.2 |
| cisco | ios_xe | 16.6.3 |
| cisco | ios_xe | 16.6.4 |
| cisco | ios_xe | 16.6.4a:a |
| cisco | ios_xe | 16.6.4s:s |
| cisco | ios_xe | 16.7.1 |
| cisco | ios_xe | 16.7.1a:a |
| cisco | ios_xe | 16.7.1b:b |
| cisco | ios_xe | 16.7.2 |
| cisco | ios_xe | 16.8.1 |
| cisco | ios_xe | 16.8.1a:a |
| cisco | ios_xe | 16.8.1b:b |
| cisco | ios_xe | 16.8.1c:c |
| cisco | ios_xe | 16.8.1d:d |
| cisco | ios_xe | 16.8.1e:e |
| cisco | ios_xe | 16.8.1s:s |
| cisco | ios_xe | 16.8.2 |
| cisco | ios_xe | 16.9.1 |
| cisco | ios_xe | 16.9.1a:a |
| cisco | ios_xe | 16.9.1b:b |
| cisco | ios_xe | 16.9.1c:c |
| cisco | ios_xe | 16.9.1d:d |
| cisco | ios_xe | 16.9.1s:s |
| cisco | ios_xe | 16.9.2 |
| cisco | ios_xe | 16.9.2a:a |
𝑥
= Vulnerable software versions