CVE-2019-1911CWE-216

Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability

Medium · published July 6, 2019

CVSS v3.0
5.3
EPSS
0%
Percentile
23.9
In the wild
Unconfirmed
What it is

A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to escape the restricted shell. The vulnerability is due to insufficient input validation of shell commands. An attacker could exploit this vulnerability by executing crafted commands in the shell. A successful exploit could allow the attacker to escape the restricted shell and access commands in the context of the restricted shell user, which does not have root privileges.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00321 · 23.9th percentile
Weakness
CWE-216 · DEPRECATED: Containment Errors (Container Errors)
Published
2019-07-06T01:20Z
EPSS history
Timeline
  • 06 JUL 01:20Z
    Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability
    cvelistv5