CVE-2019-12650

Cisco IOS XE Software Web UI Command Injection Vulnerabilities

Published Sep 25, 2019 CVSS 3.1 · 8.8 High EPSS 26.1% KEV · Not listed
Description
Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Cisco 1100-4p Integrated Services Router 1100-8p Integrated Services Router 1101-4p Integrated Services Router 1109-2p Integrated Services Router 1109-4p Integrated Services Router 1111x-8p Integrated Services Router Asr 1001-x Asr 1002-hx Asr 1006-x Asr 1009-x Catalyst 3650-12x48uq Catalyst 3650-12x48ur Catalyst 3650-12x48uz Catalyst 3650-24pd Catalyst 3650-24pdm Catalyst 3650-48fq Catalyst 3650-48fqm Catalyst 3650-8x24uq Catalyst 3850-12x48u Catalyst 3850-24u Catalyst 3850-24xs Catalyst 3850-24xu Catalyst 3850-48u Catalyst 3850-48xs Catalyst 3850-nm-2-40g Catalyst 3850-nm-8-10g Catalyst 9800-40 Catalyst 9800-80 Catalyst 9800-cl Catalyst 9800-l Catalyst 9800-l-c Catalyst 9800-l-f Catalyst C9200-24p Catalyst C9200-24t Catalyst C9200-48p Catalyst C9200-48t Catalyst C9200l-24p-4g Catalyst C9200l-24p-4x Catalyst C9200l-24pxg-2y Catalyst C9200l-24pxg-4x Catalyst C9200l-24t-4g Catalyst C9200l-24t-4x Catalyst C9200l-48p-4g Catalyst C9200l-48p-4x Catalyst C9200l-48pxg-2y Catalyst C9200l-48pxg-4x Catalyst C9200l-48t-4g Catalyst C9200l-48t-4x Catalyst C9300-24p Catalyst C9300-24s Catalyst C9300-24t Catalyst C9300-24u Catalyst C9300-24ux Catalyst C9300-48p Catalyst C9300-48s Catalyst C9300-48t Catalyst C9300-48u Catalyst C9300-48un Catalyst C9300-48uxm Catalyst C9300l-24p-4g Catalyst C9300l-24p-4x Catalyst C9300l-24t-4g Catalyst C9300l-24t-4x Catalyst C9300l-48p-4g Catalyst C9300l-48p-4x Catalyst C9300l-48t-4g Catalyst C9300l-48t-4x Catalyst C9500-12q Catalyst C9500-16x Catalyst C9500-24q Catalyst C9500-24y4c Catalyst C9500-32c Catalyst C9500-32qc Catalyst C9500-40x Catalyst C9500-48y4c Cloud Services Router 1000v Integrated Services Virtual Router Ios Ios Xe
Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Nov 21, 2024, 7:14 PM
Reserved
Jun 4, 2019, 12:00 AM
Status
Modified
Published
Sep 25, 2019, 8:15 PM
Modified
Jun 17, 2026, 2:15 AM