High severity · published Jan 24, 2019
CVE-2019-1650
Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability
8.8
CVSS
3.5%
EPSS
No
On KEV
Description
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the save command in the CLI of the affected software. An attacker could exploit this vulnerability by modifying the save command in the CLI of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the underlying operating system of an affected device and escalate their privileges to the root user.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cisco SD-WAN Solution · Cisco
All versions, or not specified · source: vendor
SD
Sd-wan · Cisco
before 18.4.0 · source: NVD
VO
Vbond Orchestrator · Cisco
All versions, or not specified · source: NVD
V1
Vedge 100 Firmware · Cisco
All versions, or not specified · source: NVD
V1
Vedge 1000 Firmware · Cisco
All versions, or not specified · source: NVD
V2
Vedge 2000 Firmware · Cisco
All versions, or not specified · source: NVD
V5
Vedge 5000 Firmware · Cisco
All versions, or not specified · source: NVD
VN
Vmanage Network Management · Cisco
All versions, or not specified · source: NVD
VC
Vsmart Controller · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-1650
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-1650
Third Party Advisory
http://www.securityfocus.com/bid/106716
Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-sdwan-file-write
More from Cisco SD-WAN Solution
8.8
CVE-2019-1651
Cisco SD-WAN Solution Buffer Overflow Vulnerability
8.0
CVE-2019-1647
Cisco SD-WAN Solution Unauthorized Access Vulnerability
7.8
CVE-2022-20818
Cisco SD-WAN Software Privilege Escalation Vulnerabilities
7.8
CVE-2019-1648
Cisco SD-WAN Solution Privilege Escalation Vulnerability
7.8
CVE-2019-1646
Privilege Escalation Vulnerability in Cisco SD-WAN Solution
