PT-2019-2792 · Cisco · Cisco Industrial Network Director

Published 2019-07-17 · Updated 2021-10-29 · CVE-2019-1940

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Industrial Network Director versions prior to 1.7

Description A vulnerability in the Web Services Management Agent (WSMA) feature could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid X.509 certificate. The issue is due to insufficient X.509 certificate validation when establishing a WSMA connection. An attacker could exploit this by supplying a crafted X.509 certificate during the WSMA connection setup phase, potentially allowing them to conduct man-in-the-middle attacks to decrypt confidential information on WSMA connections.

Recommendations For versions prior to 1.7, update to version 1.7 or later to resolve the issue. As a temporary workaround, consider restricting WSMA connections to trusted sources or implementing additional validation for X.509 certificates to minimize the risk of exploitation.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-310

CWE-295

Related Identifiers

BDU:2019-02744

CVE-2019-1940

Affected Products

Cisco Industrial Network Director

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-1940 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1940 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02744 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-wsma-info · Vendor Advisory
• https://securityfocus.com/bid/109296 · Note
• http://securityfocus.com/bid/109296 · Note