CVE-2019-1755
28.03.2019, 01:29
A vulnerability in the Web Services Management Agent (WSMA) function of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary Cisco IOS commands as a privilege level 15 user. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker could exploit this vulnerability by submitting crafted HTTP requests to the targeted application. A successful exploit could allow the attacker to execute arbitrary commands on the affected device.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cisco | ios_xe | 3.2.0ja:ja |
| cisco | ios_xe | 3.6.10e:e |
| cisco | ios_xe | 16.1.1 |
| cisco | ios_xe | 16.1.2 |
| cisco | ios_xe | 16.1.3 |
| cisco | ios_xe | 16.2.1 |
| cisco | ios_xe | 16.2.2 |
| cisco | ios_xe | 16.3.1 |
| cisco | ios_xe | 16.3.1a:a |
| cisco | ios_xe | 16.3.2 |
| cisco | ios_xe | 16.3.3 |
| cisco | ios_xe | 16.3.4 |
| cisco | ios_xe | 16.3.5 |
| cisco | ios_xe | 16.3.5b:b |
| cisco | ios_xe | 16.3.6 |
| cisco | ios_xe | 16.3.7 |
| cisco | ios_xe | 16.3.8 |
| cisco | ios_xe | 16.4.1 |
| cisco | ios_xe | 16.4.2 |
| cisco | ios_xe | 16.4.3 |
| cisco | ios_xe | 16.5.1 |
| cisco | ios_xe | 16.5.1a:a |
| cisco | ios_xe | 16.5.1b:b |
| cisco | ios_xe | 16.5.2 |
| cisco | ios_xe | 16.5.3 |
| cisco | ios_xe | 16.6.1 |
| cisco | ios_xe | 16.6.2 |
| cisco | ios_xe | 16.6.3 |
| cisco | ios_xe | 16.7.1 |
| cisco | ios_xe | 16.7.1a:a |
| cisco | ios_xe | 16.7.1b:b |
| cisco | ios_xe | 16.8.1 |
| cisco | ios_xe | 16.8.1a:a |
| cisco | ios_xe | 16.8.1b:b |
| cisco | ios_xe | 16.8.1c:c |
| cisco | ios_xe | 16.8.1d:d |
| cisco | ios_xe | 16.8.1e:e |
| cisco | ios_xe | 16.8.1s:s |
𝑥
= Vulnerable software versions
Common Weakness Enumeration