CVE-2019-15956

published 2019-11-26

CVE-2019-15956: A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker…

Priority P3 52 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization controls for a specific URL in the web management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could have a twofold impact: the attacker could either change the administrator password, gaining privileged access, or reset the network configuration details, causing a denial of service (DoS) condition. In both scenarios, manual intervention is required to restore normal operations.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
cisco	asyncos	>= 10.1 < 10.1.5-004	10.1.5-004
cisco	asyncos	>= 10.5 < 11.5.3-016	11.5.3-016
cisco	asyncos	>= 11.7 < 11.7.1-006	11.7.1-006
cisco	cisco_web_security_appliance	>= unspecified < n/a	n/a
cisco	web_security_appliance	—	—
cisco	web_security_appliance	—	—
cisco	web_security_appliance	—	—
cisco	web_security_appliance_unauthorized_device_reset	—	—

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v3.0 8.8 HIGH CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 6.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:P

vendor_cisco 8.8 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-284