CVE-2019-1861 Cisco Industrial Network Director Remote Code Execution Vulnerability
Authenticated administrators can upload arbitrary files to execute code with elevated privileges in Cisco Industrial Network Director.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-1861?
CVE-2019-1861 is a high-severity vulnerability in Cisco Industrial Network Director, published on 5 Jun 2019. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of files uploaded to the affected application. An attacker could exploit this vulnerability by authenticating to the affected system using administrator privileges and uploading an arbitrary file. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges.
Which versions are affected by CVE-2019-1861?
It affects 1 product.
Products include Cisco Industrial Network Director.
How do I fix CVE-2019-1861?
No fix has been published for CVE-2019-1861 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-1861 being exploited?
There is no known exploitation of CVE-2019-1861 in the wild and no public exploit code.
Other vulnerabilities in Cisco Industrial Network Director
- CVE-2023-20036 Cisco Industrial Network Director Command Injection Vulnerability
- CVE-2023-20038 Hardcoded credentials in Cisco Industrial Network Director
- CVE-2019-1976 Cisco Industrial Network Director Configuration Data Information Disclosure Vulnerability
- CVE-2020-3567 Cisco Industrial Network Director Denial of Service Vulnerability
- CVE-2019-15973 Cisco Industrial Network Director Reflected Cross-Site Scripting Vulnerability
Sources
Also known as GHSA-2vgx-3f92-37q8.