PT-2019-1991 · Cisco · Cisco Dna Center

Published 2019-04-17 · Updated 2025-07-23 · CVE-2019-1841

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Cisco DNA Center versions prior to 1.2.5

Description A vulnerability in the Software Image Management feature could allow an authenticated, remote attacker to access internal services without additional authentication. This issue is due to insufficient validation of user-supplied input. An attacker could exploit this by sending arbitrary HTTP requests to internal services, potentially bypassing firewalls or other protections to access unauthorized internal services.

Recommendations For versions prior to 1.2.5, update to version 1.2.5 or later to resolve the issue. As a temporary workaround, consider restricting access to internal services until a patch is applied. Avoid using the Software Image Management feature until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-20

CWE-441

Related Identifiers

BDU:2019-01684

CVE-2019-1841

Affected Products

Cisco Dna Center

References · 6

• https://bdu.fstec.ru/vul/2019-01684 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1841 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-swim-proxy · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1841 · Security Note
• https://t.me/cveNotify/129983 · Telegram Post
• http://securityfocus.com/bid/108084 · Note