CVE-2019-1651: Cisco SD-WAN Solution Buffer Overflow Vulnerability
First published: Thu Jan 24 2019(Updated: )
A vulnerability in the vContainer of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to cause a denial of service (DoS) condition and execute arbitrary code as the root user. The vulnerability is due to improper bounds checking by the vContainer. An attacker could exploit this vulnerability by sending a malicious file to an affected vContainer instance. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected vContainer, which could result in a DoS condition that the attacker could use to execute arbitrary code as the root user.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Vsmart Controller |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-1651?
CVE-2019-1651 is a vulnerability in the vContainer of the Cisco SD-WAN Solution that could allow an authenticated remote attacker to cause a denial of service (DoS) condition and execute arbitrary code as the root user.
How severe is CVE-2019-1651?
CVE-2019-1651 has a severity rating of 8.8, which is considered critical.
Which software is affected by CVE-2019-1651?
The Cisco Vsmart Controller is affected by CVE-2019-1651.
How can an attacker exploit CVE-2019-1651?
An attacker could exploit CVE-2019-1651 by exploiting the improper bounds checking by the vContainer.
Are there any fixes or patches available for CVE-2019-1651?
Yes, Cisco has provided security advisories and patches to address the vulnerability. Please refer to the Cisco Security Advisory for more information.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/title
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco vsmart controller