CVE-2019-1911 Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability

Medium 5.3 Published 6 Jul 2019 Updated 21 Nov 2024

An authenticated local attacker can escape the restricted shell in Cisco Unified CDM to execute arbitrary commands with user privileges.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-1911?

CVE-2019-1911 is a medium-severity command injection vulnerability in Cisco Unified Communications Domain Manager, published on 6 Jul 2019. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to escape the restricted shell. The vulnerability is due to insufficient input validation of shell commands. An attacker could exploit this vulnerability by executing crafted commands in the shell. A successful exploit could allow the attacker to escape the restricted shell and access commands in the context of the restricted shell user, which does not have root privileges.

Weakness: CWE-216

Which versions are affected by CVE-2019-1911?

It affects 1 product.

Products include Cisco Hosted Collaboration Solution.

How do I fix CVE-2019-1911?

No fix has been published for CVE-2019-1911 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2019-1911 being exploited?

There is no known exploitation of CVE-2019-1911 in the wild and no public exploit code.

Sources

Also known as GHSA-m9rx-h823-vf8r.