CVE-2019-1651: Cisco SD-WAN Solution Buffer Overflow Vulnerability
A vulnerability in the vContainer of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to cause a denial of service (DoS) condition and execute arbitrary code as the root user. The vulnerability is due to improper bounds checking by the vContainer. An attacker could exploit this vulnerability by sending a malicious file to an affected vContainer instance. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected vContainer, which could result in a DoS condition that the attacker could use to execute arbitrary code as the root user.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-1651?
CVE-2019-1651 is a vulnerability in the vContainer of the Cisco SD-WAN Solution that could allow an authenticated remote attacker to cause a denial of service (DoS) condition and execute arbitrary code as the root user.
How severe is CVE-2019-1651?
CVE-2019-1651 has a severity rating of 8.8, which is considered critical.
Which software is affected by CVE-2019-1651?
The Cisco Vsmart Controller is affected by CVE-2019-1651.
How can an attacker exploit CVE-2019-1651?
An attacker could exploit CVE-2019-1651 by exploiting the improper bounds checking by the vContainer.
Are there any fixes or patches available for CVE-2019-1651?
Yes, Cisco has provided security advisories and patches to address the vulnerability. Please refer to the Cisco Security Advisory for more information.