CVE-2019-1945CWE-20

Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities

Medium · published August 7, 2019

CVSS v3.0
6.7
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these vulnerabilities, see the Details section of this security advisory.

The record
Technical detail
CVSS v3.0
6.7 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2019-08-07T21:25Z
EPSS history
Timeline
  • 07 AUG 21:25Z
    Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities
    cvelistv5