CVE-2019-12651CWE-77

Cisco IOS XE Software Web UI Command Injection Vulnerabilities

High · published September 25, 2019

CVSS v3.0
7.6
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.0
7.6 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.02543 · 84.9th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2019-09-25T20:10Z
EPSS history
Timeline
  • 25 SEP 20:10Z
    Cisco IOS XE Software Web UI Command Injection Vulnerabilities
    cvelistv5