CVE-2019-1911

CWE-2164 documents4 sources
Severity
7.8HIGH
EPSS
0.1%
top 82.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Cisco Unified Communications Domain ManagerCisco Hosted Collaboration Solution
Timeline
PublishedJul 6
Latest updateMay 24

Description

A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to escape the restricted shell. The vulnerability is due to insufficient input validation of shell commands. An attacker could exploit this vulnerability by executing crafted commands in the shell. A successful exploit could allow the attacker to escape the restricted shell and access commands in the context of the restricted shell user, which does n…

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 1.8 | Impact: 3.4

Affected Packages2 packages

▶CVEListV5cisco/cisco_unified_communications_domain_managerunspecified — 11.5(3)PB4

🔴Vulnerability Details

2
GHSA
GHSA-m9rx-h823-vf8r: A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to↗2022-05-24
▶
CVEList
Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability↗2019-07-06
▶

📋Vendor Advisories

1
Cisco
Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability↗2019-07-03
▶
CVE-2019-1911 (HIGH CVSS 7.8) | A vulnerability in the CLI of Cisco | cvebase.io