CVE-2019-12629

A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for certain fields in the affected solution. An attacker could exploit this vulnerability by configuring a malicious username on the login page of the affected solution. A successful exploit could allow the attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system.

Link	Resource
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-sdwan-cmd-inject	Vendor Advisory

Configuration 1

---

Published : 2020-01-26 05:15

Updated : 2020-10-08 02:39

---

NVD link : CVE-2019-12629

Mitre link : CVE-2019-12629

Cisco

Sd-wan Firmware

Vedge 100m

Vedge 100wm

Vedge-100

Vedge-1000

Vedge-100b

Vedge-2000

Vedge-5000

CWE-78