CVE-2019-1647CWE-284

Cisco SD-WAN Solution Unauthorized Access Vulnerability

High · published January 24, 2019

CVSS v3.0
8.0
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent attacker to bypass authentication and have direct unauthorized access to other vSmart containers. The vulnerability is due to an insecure default configuration of the affected system. An attacker could exploit this vulnerability by directly connecting to the exposed services. An exploit could allow the attacker to retrieve and modify critical system files.

The record
Technical detail
CVSS v3.0
8.0 · HIGH
Vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00808 · 56.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2019-01-24T15:00Z
EPSS history
Timeline
  • 24 JAN 15:00Z
    Cisco SD-WAN Solution Unauthorized Access Vulnerability
    cvelistv5