AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-16029

CRITICAL · CVSS 9.1 EPSS 1.07% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-01-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2019-16029
Severity
CRITICAL
CVSS
9.1
EPSS
1.07%
Cisco

Original NVD Description

A vulnerability in the application programming interface (API) of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service (DoS) condition of the web interface. The vulnerability is due to the lack of input validation in the API. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. An exploit could allow the attacker to change or corrupt user account information which could grant the attacker administrator access or prevent legitimate user access to the web interface, resulting in a denial of service (DoS) condition.