PT-2019-1888 · Cisco · Cisco Ios Xe

Published 2019-03-27 · Updated 2020-10-08 · CVE-2019-1742

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description The issue is related to improper access control to files within the web UI of Cisco IOS XE Software, allowing an unauthenticated, remote attacker to access sensitive configuration information by sending a malicious request to an affected device. This could enable the attacker to gain access to sensitive configuration information.

Recommendations For Cisco IOS XE Software, update to a version that includes the fix for this issue, as software updates have been released by Cisco to address this vulnerability. At the moment, there is no information about specific versions that contain a fix for this vulnerability, but it is recommended to follow Cisco's security advisory for the most up-to-date information on resolving this issue.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

BDU:2019-01541

CVE-2019-1742

Affected Products

Cisco Ios Xe

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-xeid · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-1742 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01541 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-1742 · Security Note
• http://securityfocus.com/bid/107600 · Note