CVE-2019-1647 - CVE House

Back to Database

Status published High CVE-2019-1647

Cisco SD-WAN Solution Unauthorized Access Vulnerability

8 CVSS

Vulnerability Description

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent attacker to bypass authentication and have direct unauthorized access to other vSmart containers. The vulnerability is due to an insecure default configuration of the affected system. An attacker could exploit this vulnerability by directly connecting to the exposed services. An exploit could allow the attacker to retrieve and modify critical system files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-1647

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Cisco

View All →

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

Cisco Unified Intelligence Center API Information Disclosure Vulnerability

Cisco Unified Contact Center Express Remote Code Execution Vulnerability

Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability

Cisco Unified Contact Center Express Arbitrary File Download Vulnerability

Affected Vendor

Cisco

View all reports →

Affected Software

Cisco SD-WAN Solution

Vulnerable Versions:

Unknown

Timeline

Official Publish: January 24th, 2019

Last Modified: November 20th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1078 Valid Accounts

T1213 Data from Information Repositories

T1565.002 Stored Data Manipulation