cveboard RSS feed

CVE-2019-1753

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2019
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Cisco IOS XE Software Privilege Escalation Vulnerability

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated but unprivileged (level 1), remote attacker to run privileged Cisco IOS commands by using the web UI. The vulnerability is due to a failure to validate and sanitize input in Web Services Management Agent (WSMA) functions. An attacker could exploit this vulnerability by submitting a malicious payload to the affected device's web UI. A successful exploit could allow the lower-privileged attacker to execute arbitrary commands with higher privileges on the affected device.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco IOS XE Software

Vendor
Cisco
Product
Cisco IOS XE Software
Platforms
Unknown
Default status
Unknown
Cisco IOS XE Software · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3.6.10EaffectedUnavailableUnavailableUnavailableNone listed
16.1.1affectedUnavailableUnavailableUnavailableNone listed
16.1.2affectedUnavailableUnavailableUnavailableNone listed
16.1.3affectedUnavailableUnavailableUnavailableNone listed
3.2.0JAaffectedUnavailableUnavailableUnavailableNone listed
16.2.1affectedUnavailableUnavailableUnavailableNone listed
16.2.2affectedUnavailableUnavailableUnavailableNone listed
16.3.1affectedUnavailableUnavailableUnavailableNone listed
16.3.2affectedUnavailableUnavailableUnavailableNone listed
16.3.3affectedUnavailableUnavailableUnavailableNone listed
16.3.1aaffectedUnavailableUnavailableUnavailableNone listed
16.3.4affectedUnavailableUnavailableUnavailableNone listed
16.3.5affectedUnavailableUnavailableUnavailableNone listed
16.3.5baffectedUnavailableUnavailableUnavailableNone listed
16.3.6affectedUnavailableUnavailableUnavailableNone listed
16.3.7affectedUnavailableUnavailableUnavailableNone listed
16.3.8affectedUnavailableUnavailableUnavailableNone listed
16.4.1affectedUnavailableUnavailableUnavailableNone listed
16.4.2affectedUnavailableUnavailableUnavailableNone listed
16.4.3affectedUnavailableUnavailableUnavailableNone listed
16.5.1affectedUnavailableUnavailableUnavailableNone listed
16.5.1aaffectedUnavailableUnavailableUnavailableNone listed
16.5.1baffectedUnavailableUnavailableUnavailableNone listed
16.5.2affectedUnavailableUnavailableUnavailableNone listed
16.5.3affectedUnavailableUnavailableUnavailableNone listed
16.6.1affectedUnavailableUnavailableUnavailableNone listed
16.6.2affectedUnavailableUnavailableUnavailableNone listed
16.6.3affectedUnavailableUnavailableUnavailableNone listed
16.7.1affectedUnavailableUnavailableUnavailableNone listed
16.7.1aaffectedUnavailableUnavailableUnavailableNone listed
16.7.1baffectedUnavailableUnavailableUnavailableNone listed
16.8.1affectedUnavailableUnavailableUnavailableNone listed
16.8.1aaffectedUnavailableUnavailableUnavailableNone listed
16.8.1baffectedUnavailableUnavailableUnavailableNone listed
16.8.1saffectedUnavailableUnavailableUnavailableNone listed
16.8.1caffectedUnavailableUnavailableUnavailableNone listed
16.8.1daffectedUnavailableUnavailableUnavailableNone listed
16.8.1eaffectedUnavailableUnavailableUnavailableNone listed