CVE-2019-1911 - CVE House
Back to Database
Status published Medium CVE-2019-1911

Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability

Vulnerability Description

A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to escape the restricted shell. The vulnerability is due to insufficient input validation of shell commands. An attacker could exploit this vulnerability by executing crafted commands in the shell. A successful exploit could allow the attacker to escape the restricted shell and access commands in the context of the restricted shell user, which does not have root privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-1911

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Cisco Unified Communications Domain Manager
Vulnerable Versions:
unspecified

Timeline

Official Publish: July 6th, 2019
Last Modified: November 21st, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.