CVE-2019-1950

Cisco IOS XE SD-WAN Software Default Credentials Vulnerability

High · published February 19, 2020

CVSS v3.1
8.4
EPSS
0%
Percentile
25.3
In the wild
Unconfirmed
What it is

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected device. An attacker who has access to an affected device could log in with elevated privileges. A successful exploit could allow the attacker to take complete control of the device. This vulnerability affects Cisco devices that are running Cisco IOS XE SD-WAN Software releases 16.11 and earlier.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.3th percentile
Published
2020-02-19T19:55Z
EPSS history
Timeline
  • 19 FEB 19:55Z
    Cisco IOS XE SD-WAN Software Default Credentials Vulnerability
    cvelistv5