CVE-2019-12619 — SQL Injection in Cisco Sd-wan Solution

CWE-89 — SQL Injection4 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.3%
top 50.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Sd-wan SolutionCisco Sd-wan Firmware
Timeline
PublishedJan 26
Latest updateMay 24

Description

A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted input that includes SQL statements to an affected system. A successful exploit could allow the attacker to modify entries in some database tables, affecting the …

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5cisco/cisco_sd-wan_solutionunspecified — n/a

🔴Vulnerability Details

2
GHSA
GHSA-jq6q-rgpf-9wqr: A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an aff↗2022-05-24
▶
CVEList
Cisco SD-WAN Solution SQL Injection Vulnerability↗2020-01-26
▶

📋Vendor Advisories

1
Cisco
Cisco SD-WAN Solution SQL Injection Vulnerability↗2020-01-22
▶
CVE-2019-12619 — SQL Injection in Cisco Sd-wan Solution | cvebase