Cisco IOS XE Software CVE-2019-1745 Local Command Injection Vulnerability
BID:107588
CVE-2019-1745 |Info
Cisco IOS XE Software CVE-2019-1745 Local Command Injection Vulnerability
| Bugtraq ID: | 107588 |
| Class: | Input Validation Error |
| CVE: |
CVE-2019-1745 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 27 2019 12:00AM |
| Updated: | Mar 27 2019 12:00AM |
| Credit: | Cisco. |
| Vulnerable: |
Cisco IOS XE Software 0 Cisco Ios 16.9.1 Cisco Ios 16.8.2 Cisco Ios 16.7.1 |
| Not Vulnerable: | |
Discussion
Cisco IOS XE Software CVE-2019-1745 Local Command Injection Vulnerability
Cisco IOS XE Software is prone to a local command-injection vulnerability because it fails to properly sanitize user-supplied input.
A local attacker can exploit this issue to execute arbitrary commands on the affected system. This may aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCvj61307.
Cisco IOS XE Software is prone to a local command-injection vulnerability because it fails to properly sanitize user-supplied input.
A local attacker can exploit this issue to execute arbitrary commands on the affected system. This may aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCvj61307.
Exploit / POC
Cisco IOS XE Software CVE-2019-1745 Local Command Injection Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Cisco IOS XE Software CVE-2019-1745 Local Command Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco IOS XE Software CVE-2019-1745 Local Command Injection Vulnerability
References:
References: