Cisco IOS XE SD-WAN Software Default Credentials Vulnerability
CVE-2019-1950

8.4HIGH

Key Information:

Vendor
Cisco
Status
Cisco iOS Xe Sd-wan Software
Vendor
CVE Published:
19 February 2020

Badges

👾 Exploit Exists

Summary

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected device. An attacker who has access to an affected device could log in with elevated privileges. A successful exploit could allow the attacker to take complete control of the device. This vulnerability affects Cisco devices that are running Cisco IOS XE SD-WAN Software releases 16.11 and earlier.

Affected Version(s)

Cisco IOS XE SD-WAN Software 16.11 and earlier

References

https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.