CVE-2019-1681: Cisco Network Convergence System 1000 Series TFTP Directory Traversal Vulnerability
First published: Thu Feb 21 2019(Updated: )
A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of user-supplied input within TFTP requests processed by the affected software. An attacker could exploit this vulnerability by using directory traversal techniques in malicious requests sent to the TFTP service on a targeted device. An exploit could allow the attacker to retrieve arbitrary files from the targeted device, resulting in the disclosure of sensitive information. This vulnerability affects Cisco IOS XR Software releases prior to Release 6.5.2 for Cisco Network Convergence System 1000 Series devices when the TFTP service is enabled.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XRv 9000 | <6.5.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-1681?
CVE-2019-1681 is classified as a high-severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2019-1681?
To fix CVE-2019-1681, upgrade your Cisco IOS XR to a version 6.5.2 or higher, if applicable.
What systems are affected by CVE-2019-1681?
CVE-2019-1681 affects the Cisco Network Convergence System 1000 Series running vulnerable versions of Cisco IOS XR.
What impact can CVE-2019-1681 have on a network?
CVE-2019-1681 can allow unauthorized remote attackers to retrieve arbitrary files from the device, leading to significant information disclosure.
Is authentication required to exploit CVE-2019-1681?
No, CVE-2019-1681 can be exploited by an unauthenticated remote attacker.
- agent/weakness
- agent/references
- agent/type
- agent/title
- agent/severity
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/event
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco ios xrv 9000