AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-1648

HIGH · CVSS 7.8 EPSS 0.37% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-01-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2019-1648
Severity
HIGH
CVSS
7.8
EPSS
0.37%
Cisco

Original NVD Description

A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the group configuration. An attacker could exploit this vulnerability by writing a crafted file to the directory where the user group configuration is located in the underlying operating system. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device.