CVE-2019-1651 | A vulnerability in the vContainer of the Cisco SD-WAN Soluti… | CVSS 9.9 CRITICAL

Description

A vulnerability in the vContainer of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to cause a denial of service (DoS) condition and execute arbitrary code as the root user. The vulnerability is due to improper bounds checking by the vContainer. An attacker could exploit this vulnerability by sending a malicious file to an affected vContainer instance. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected vContainer, which could result in a DoS condition that the attacker could use to execute arbitrary code as the root user.

Metadata

CVE ID: CVE-2019-1651
State: PUBLISHED
Assigner: cisco
Reserved: 2018-12-06 00:00 UTC
Published: 2019-01-24 15:00 UTC
Last updated: 2024-11-20 17:28 UTC
Primary CWE: CWE-119
CWE-119
Vendor / Product: Cisco / Cisco SD-WAN Solution
Sources: cve.org · NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.0

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Cisco	Cisco SD-WAN Solution	—	n/a

Weakness (CWE)

CWE	Source	Description
CWE-119	cna	CWE-119

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.9	CRITICAL	3.0	cna	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References (2)

106703 http://www.securityfocus.com/bid/106703
20190123 Cisco SD-WAN Solution Buffer Overflow Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-sdwan-bo