Details of VAR-201901-0366

ID

VAR-201901-0366

CVE

CVE-2019-1646

TITLE

Cisco SD-WAN Solution Vulnerabilities related to authorization, permissions, and access control

Trust: 0.8

sources: JVNDB: JVNDB-2019-001429

DESCRIPTION

A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device configuration files. The vulnerability exists because user input is not properly sanitized for certain commands at the CLI. An attacker could exploit this vulnerability by sending crafted commands to the CLI of an affected device. A successful exploit could allow the attacker to establish an interactive session with elevated privileges. The attacker could then use the elevated privileges to further compromise the device or obtain additional configuration data from the device. Cisco SD-WAN Solution Contains vulnerabilities related to authorization, permissions, and access control.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Cisco SD-WAN is prone to multiple privilege-escalation vulnerabilities. Cisco vBond Orchestrator Software and others are products of Cisco (Cisco). Cisco vBond Orchestrator Software is a suite of secure network extension management software. vEdge 100 Series Routers is a 100 series router product. SD-WAN Solution is a set of network expansion solutions running in it. The following products are affected: Cisco vBond Orchestrator Software; vEdge 100 Series Routers; vEdge 1000 Series Routers; vEdge 2000 Series Routers; vEdge 5000 Series Routers; vEdge Cloud Router Platform; vManage Network Management Software; vSmart Controller Software

Trust: 1.98

sources: NVD: CVE-2019-1646 // JVNDB: JVNDB-2019-001429 // BID: 106723 // VULHUB: VHN-148608

AFFECTED PRODUCTS

vendor:	cisco	model:	vmanage network management	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	sd-wan	scope:	lt	version:	18.4.0	Trust: 1.0
vendor:	cisco	model:	vedge 5000	scope:	eq	version:	*	Trust: 1.0
vendor:	cisco	model:	vsmart controller	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	vedge 100	scope:	eq	version:	*	Trust: 1.0
vendor:	cisco	model:	vedge 1000	scope:	eq	version:	*	Trust: 1.0
vendor:	cisco	model:	vbond orchestrator	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	vedge 2000	scope:	eq	version:	*	Trust: 1.0
vendor:	cisco	model:	sd-wan	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	vbond orchestrator	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	vedge 100	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	vedge 1000	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	vedge 2000	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	vedge 5000	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	vmanage network management	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	vsmart controller	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	vsmart controller	scope:	eq	version:	0	Trust: 0.3
vendor:	cisco	model:	vmanage network management	scope:	eq	version:	0	Trust: 0.3
vendor:	cisco	model:	vedge cloud router	scope:	eq	version:	0	Trust: 0.3
vendor:	cisco	model:	vedge	scope:	eq	version:	50000	Trust: 0.3
vendor:	cisco	model:	vedge	scope:	eq	version:	20000	Trust: 0.3
vendor:	cisco	model:	vedge	scope:	eq	version:	10000	Trust: 0.3
vendor:	cisco	model:	vedge	scope:	eq	version:	1000	Trust: 0.3
vendor:	cisco	model:	vbond orchestrator	scope:	eq	version:	0	Trust: 0.3
vendor:	cisco	model:	sd-wan	scope:	eq	version:	18.3.1	Trust: 0.3
vendor:	cisco	model:	sd-wan	scope:	eq	version:	18.3	Trust: 0.3
vendor:	cisco	model:	sd-wan	scope:	eq	version:	17.2.8	Trust: 0.3
vendor:	cisco	model:	sd-wan	scope:	eq	version:	0	Trust: 0.3
vendor:	cisco	model:	sd-wan	scope:	ne	version:	18.4	Trust: 0.3

sources: BID: 106723 // JVNDB: JVNDB-2019-001429 // NVD: CVE-2019-1646

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-1646
value:	HIGH
Trust: 1.0
ykramarz@cisco.com:	CVE-2019-1646
value:	HIGH
Trust: 1.0
NVD:	CVE-2019-1646
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201901-870
value:	HIGH
Trust: 0.6
VULHUB:	VHN-148608
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2019-1646
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-148608
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

ykramarz@cisco.com:	CVE-2019-1646
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 1.8
nvd@nist.gov:	CVE-2019-1646
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0

sources: VULHUB: VHN-148608 // JVNDB: JVNDB-2019-001429 // CNNVD: CNNVD-201901-870 // NVD: CVE-2019-1646 // NVD: CVE-2019-1646

PROBLEMTYPE DATA

problemtype:	CWE-264	Trust: 1.9
problemtype:	CWE-77	Trust: 1.1

sources: VULHUB: VHN-148608 // JVNDB: JVNDB-2019-001429 // NVD: CVE-2019-1646

THREAT TYPE

local

Trust: 0.9

sources: BID: 106723 // CNNVD: CNNVD-201901-870

TYPE

command injection

Trust: 0.6

sources: CNNVD: CNNVD-201901-870

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-001429

PATCH

title:	cisco-sa-20190123-sdwan-escal	url:	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-sdwan-escal	Trust: 0.8
title:	Cisco SD-WAN Solution Fixes for permission permissions and access control vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=88956	Trust: 0.6

sources: JVNDB: JVNDB-2019-001429 // CNNVD: CNNVD-201901-870

EXTERNAL IDS

db:	NVD	id:	CVE-2019-1646	Trust: 2.8
db:	BID	id:	106723	Trust: 2.0
db:	JVNDB	id:	JVNDB-2019-001429	Trust: 0.8
db:	CNNVD	id:	CNNVD-201901-870	Trust: 0.7
db:	NSFOCUS	id:	43900	Trust: 0.6
db:	VULHUB	id:	VHN-148608	Trust: 0.1

sources: VULHUB: VHN-148608 // BID: 106723 // JVNDB: JVNDB-2019-001429 // CNNVD: CNNVD-201901-870 // NVD: CVE-2019-1646

REFERENCES

url:	http://www.securityfocus.com/bid/106723	Trust: 2.3
url:	https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20190123-sdwan-escal	Trust: 2.0
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-1646	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2019-1646	Trust: 0.8
url:	http://www.nsfocus.net/vulndb/43900	Trust: 0.6
url:	http://www.cisco.com/	Trust: 0.3

sources: VULHUB: VHN-148608 // BID: 106723 // JVNDB: JVNDB-2019-001429 // CNNVD: CNNVD-201901-870 // NVD: CVE-2019-1646

CREDITS

These vulnerabilities were found during internal security testing.,Cisco

Trust: 0.6

sources: CNNVD: CNNVD-201901-870

SOURCES

db:	VULHUB	id:	VHN-148608
db:	BID	id:	106723
db:	JVNDB	id:	JVNDB-2019-001429
db:	CNNVD	id:	CNNVD-201901-870
db:	NVD	id:	CVE-2019-1646

LAST UPDATE DATE

2024-08-14T13:27:07.519000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-148608	date:	2020-10-05T00:00:00
db:	BID	id:	106723	date:	2019-01-23T00:00:00
db:	JVNDB	id:	JVNDB-2019-001429	date:	2019-03-05T00:00:00
db:	CNNVD	id:	CNNVD-201901-870	date:	2020-10-09T00:00:00
db:	NVD	id:	CVE-2019-1646	date:	2020-10-05T19:10:56.130

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-148608	date:	2019-01-24T00:00:00
db:	BID	id:	106723	date:	2019-01-23T00:00:00
db:	JVNDB	id:	JVNDB-2019-001429	date:	2019-03-05T00:00:00
db:	CNNVD	id:	CNNVD-201901-870	date:	2019-01-24T00:00:00
db:	NVD	id:	CVE-2019-1646	date:	2019-01-24T15:29:00.643