Lucene search
HistorySep 25, 2019 - 8:15 p.m.
CVE-2019-12650
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
0.778 High
EPSS
Percentile
98.3%
Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Affected configurations
Node
ciscoiosMatch16.11.1
Node
ciscoios_xeMatch16.6.5
cisco1100-4p_integrated_services_routerMatch-
ORcisco1100-8p_integrated_services_routerMatch-
ORcisco1101-4p_integrated_services_routerMatch-
ORcisco1109-2p_integrated_services_routerMatch-
ORcisco1109-4p_integrated_services_routerMatch-
ORcisco1111x-8p_integrated_services_routerMatch-
ORciscoasr_1001-xMatch-
ORciscoasr_1002-hxMatch-
ORciscoasr_1006-xMatch-
ORciscoasr_1009-xMatch-
ORciscocatalyst_3650-12x48uqMatch-
ORciscocatalyst_3650-12x48urMatch-
ORciscocatalyst_3650-12x48uzMatch-
ORciscocatalyst_3650-24pdMatch-
ORciscocatalyst_3650-24pdmMatch-
ORciscocatalyst_3650-48fqMatch-
ORciscocatalyst_3650-48fqmMatch-
ORciscocatalyst_3650-8x24uqMatch-
ORciscocatalyst_3850-12x48uMatch-
ORciscocatalyst_3850-24uMatch-
ORciscocatalyst_3850-24xsMatch-
ORciscocatalyst_3850-24xuMatch-
ORciscocatalyst_3850-48uMatch-
ORciscocatalyst_3850-48xsMatch-
ORciscocatalyst_3850-nm-2-40gMatch-
ORciscocatalyst_3850-nm-8-10gMatch-
ORciscocatalyst_9800-40Match-
ORciscocatalyst_9800-80Match-
ORciscocatalyst_9800-clMatch-
ORciscocatalyst_9800-lMatch-
ORciscocatalyst_9800-l-cMatch-
ORciscocatalyst_9800-l-fMatch-
ORciscocatalyst_c9200-24pMatch-
ORciscocatalyst_c9200-24tMatch-
ORciscocatalyst_c9200-48pMatch-
ORciscocatalyst_c9200-48tMatch-
ORciscocatalyst_c9200l-24p-4gMatch-
ORciscocatalyst_c9200l-24p-4xMatch-
ORciscocatalyst_c9200l-24pxg-2yMatch-
ORciscocatalyst_c9200l-24pxg-4xMatch-
ORciscocatalyst_c9200l-24t-4gMatch-
ORciscocatalyst_c9200l-24t-4xMatch-
ORciscocatalyst_c9200l-48p-4gMatch-
ORciscocatalyst_c9200l-48p-4xMatch-
ORciscocatalyst_c9200l-48pxg-2yMatch-
ORciscocatalyst_c9200l-48pxg-4xMatch-
ORciscocatalyst_c9200l-48t-4gMatch-
ORciscocatalyst_c9200l-48t-4xMatch-
ORciscocatalyst_c9300-24pMatch-
ORciscocatalyst_c9300-24sMatch-
ORciscocatalyst_c9300-24tMatch-
ORciscocatalyst_c9300-24uMatch-
ORciscocatalyst_c9300-24uxMatch-
ORciscocatalyst_c9300-48pMatch-
ORciscocatalyst_c9300-48sMatch-
ORciscocatalyst_c9300-48tMatch-
ORciscocatalyst_c9300-48uMatch-
ORciscocatalyst_c9300-48unMatch-
ORciscocatalyst_c9300-48uxmMatch-
ORciscocatalyst_c9300l-24p-4gMatch-
ORciscocatalyst_c9300l-24p-4xMatch-
ORciscocatalyst_c9300l-24t-4gMatch-
ORciscocatalyst_c9300l-24t-4xMatch-
ORciscocatalyst_c9300l-48p-4gMatch-
ORciscocatalyst_c9300l-48p-4xMatch-
ORciscocatalyst_c9300l-48t-4gMatch-
ORciscocatalyst_c9300l-48t-4xMatch-
ORciscocatalyst_c9500-12qMatch-
ORciscocatalyst_c9500-16xMatch-
ORciscocatalyst_c9500-24qMatch-
ORciscocatalyst_c9500-24y4cMatch-
ORciscocatalyst_c9500-32cMatch-
ORciscocatalyst_c9500-32qcMatch-
ORciscocatalyst_c9500-40xMatch-
ORciscocatalyst_c9500-48y4cMatch-
ORciscointegrated_services_virtual_routerMatch-
Node
ciscoios_xeMatch17.1.1
ciscocatalyst_3650-12x48uqMatch-
ORciscocatalyst_3650-12x48urMatch-
ORciscocatalyst_3650-12x48uzMatch-
ORciscocatalyst_3650-24pdMatch-
ORciscocatalyst_3650-24pdmMatch-
ORciscocatalyst_3650-48fqMatch-
ORciscocatalyst_3650-48fqmMatch-
ORciscocatalyst_3650-8x24uqMatch-
ORciscocatalyst_3850-12x48uMatch-
ORciscocatalyst_3850-24uMatch-
ORciscocatalyst_3850-24xsMatch-
ORciscocatalyst_3850-24xuMatch-
ORciscocatalyst_3850-48uMatch-
ORciscocatalyst_3850-48xsMatch-
ORciscocatalyst_3850-nm-2-40gMatch-
ORciscocatalyst_3850-nm-8-10gMatch-
ORciscocatalyst_c9200-24pMatch-
ORciscocatalyst_c9200-24tMatch-
ORciscocatalyst_c9200-48pMatch-
ORciscocatalyst_c9200-48tMatch-
ORciscocatalyst_c9200l-24p-4gMatch-
ORciscocatalyst_c9200l-24p-4xMatch-
ORciscocatalyst_c9200l-24pxg-2yMatch-
ORciscocatalyst_c9200l-24pxg-4xMatch-
ORciscocatalyst_c9200l-24t-4gMatch-
ORciscocatalyst_c9200l-24t-4xMatch-
ORciscocatalyst_c9200l-48p-4gMatch-
ORciscocatalyst_c9200l-48p-4xMatch-
ORciscocatalyst_c9200l-48pxg-2yMatch-
ORciscocatalyst_c9200l-48pxg-4xMatch-
ORciscocatalyst_c9200l-48t-4gMatch-
ORciscocatalyst_c9200l-48t-4xMatch-
ORciscocatalyst_c9300-24pMatch-
ORciscocatalyst_c9300-24sMatch-
ORciscocatalyst_c9300-24tMatch-
ORciscocatalyst_c9300-24uMatch-
ORciscocatalyst_c9300-24uxMatch-
ORciscocatalyst_c9300-48pMatch-
ORciscocatalyst_c9300-48sMatch-
ORciscocatalyst_c9300-48tMatch-
ORciscocatalyst_c9300-48uMatch-
ORciscocatalyst_c9300-48unMatch-
ORciscocatalyst_c9300-48uxmMatch-
ORciscocatalyst_c9300l-24p-4gMatch-
ORciscocatalyst_c9300l-24p-4xMatch-
ORciscocatalyst_c9300l-24t-4gMatch-
ORciscocatalyst_c9300l-24t-4xMatch-
ORciscocatalyst_c9300l-48p-4gMatch-
ORciscocatalyst_c9300l-48p-4xMatch-
ORciscocatalyst_c9300l-48t-4gMatch-
ORciscocatalyst_c9300l-48t-4xMatch-
ORciscocatalyst_c9500-12qMatch-
ORciscocatalyst_c9500-16xMatch-
ORciscocatalyst_c9500-24qMatch-
ORciscocatalyst_c9500-24y4cMatch-
ORciscocatalyst_c9500-32cMatch-
ORciscocatalyst_c9500-32qcMatch-
ORciscocatalyst_c9500-40xMatch-
ORciscocatalyst_c9500-48y4cMatch-
ORciscocloud_services_router_1000vMatch-
Related
prion
prion
Design/Logic Flaw
2019-09-25 20:15:00
cvelist
cvelist
checkpoint_advisories
checkpoint_advisories
Cisco IOS XE WebUI Privileged Command Injection (CVE-2019-12650)
2020-02-25 00:00:00
cve
cve
CVE-2019-12650
2019-09-25 20:15:10
cisco
cisco
Cisco IOS XE Software Web UI Command Injection Vulnerabilities
2019-09-25 16:00:00
nessus
nessus
Cisco IOS XE Software Web UI Command Injection Vulnerabilities
2019-10-03 00:00:00
fireeye
fireeye
threatpost
threatpost
Cisco Patches 13 High-Severity Router and Switch Bugs
2019-09-26 16:26:03
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
0.778 High
EPSS
Percentile
98.3%
Related for NVD:CVE-2019-12650