A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to write values to the underlying memory of an affected device. The vulnerability is due to improper input validation and authorization of specific commands that a user can execute within the CLI. An attacker could exploit this vulnerability by authenticating to an affected device and issuing a specific set of commands. A successful exploit could allow the attacker to modify the configuration of the device to cause it to be non-secure and abnormally functioning.
Metrics
Affected Vendors & Products
References
History
Thu, 21 Nov 2024 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2019-09-25T20:16:01.614965Z
Updated: 2024-11-21T19:13:29.710Z
Reserved: 2019-06-04T00:00:00
Link: CVE-2019-12660
Vulnrichment
Updated: 2024-08-04T23:24:39.214Z
NVD
Status : Modified
Published: 2019-09-25T21:15:11.077
Modified: 2024-11-21T04:23:17.837
Link: CVE-2019-12660
Redhat
No data.