CVE-2019-1742

Cisco IOS XE Software Information Disclosure Vulnerability

State: Published
Severity: 7.5 High
Published: Mar 27, 2019
Updated: Nov 19, 2024
Reserved: Dec 6, 2018

Description

A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access sensitive configuration information. The vulnerability is due to improper access control to files within the web UI. An attacker could exploit this vulnerability by sending a malicious request to an affected device. A successful exploit could allow the attacker to gain access to sensitive configuration information.

Scores

CVSS	Score	Vector	Source
3.0	7.5 High	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	cisco

Weaknesses

CWE-16

Affected Products

Product	Versions
Cisco IOS XE SoftwareCisco	3.2.0JAAffected 16.3.1Affected 16.3.2Affected 16.3.3Affected 16.3.1aAffected 16.3.4Affected 16.3.5Affected 16.3.5bAffected 16.3.6Affected 16.4.1Affected 16.4.2Affected 16.4.3Affected 16.5.1Affected 16.5.1aAffected 16.5.1bAffected 16.5.2Affected 16.5.3Affected 16.6.1Affected 16.6.2Affected 16.6.3Affected 16.7.1Affected 16.7.1aAffected 16.7.1bAffected

References

20190327 Cisco IOS XE Software Information Disclosure Vulnerabilityvendor-advisory
107600vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.