1. Home
  2. CVE Database
  3. CVE-2019-1950
HIGH · 8.4

CVE-2019-1950

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default c...

Vulnerability Description

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected device. An attacker who has access to an affected device could log in with elevated privileges. A successful exploit could allow the attacker to take complete control of the device. This vulnerability affects Cisco devices that are running Cisco IOS XE SD-WAN Software releases 16.11 and earlier.

CVSS Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CiscoIos Xe<= 16.11
Cisco1100-4P Integrated Services Router-
Cisco1100-8P Integrated Services Router-
Cisco1101-4P Integrated Services Router-
Cisco1109-2P Integrated Services Router-
Cisco1109-4P Integrated Services Router-
Cisco1111X-8P Integrated Services Router-
Cisco4221 Integrated Services Router-
Cisco4331 Integrated Services Router-
Cisco4431 Integrated Services Router-
Cisco4461 Integrated Services Router-
CiscoAsr 1000-X-
CiscoAsr 1001-Hx-
CiscoAsr 1002-Hx-
CiscoAsr 1002-X-
CiscoAsr 1004-
CiscoAsr 1006-
CiscoAsr 1006-X-
CiscoAsr 1009-X-
CiscoAsr 1013-

Related Weaknesses (CWE)

CWE-1188CWE-255

References

FAQ

What is CVE-2019-1950?

CVE-2019-1950 is a vulnerability with a CVSS score of 8.4 (HIGH). A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default c...

How severe is CVE-2019-1950?

CVE-2019-1950 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-1950?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios Xe, Cisco 1100-4P Integrated Services Router, Cisco 1100-8P Integrated Services Router, Cisco 1101-4P Integrated Services Router, Cisco 1109-2P Integrated Services Router.