CVE-2019-1623

Name: CVE-2019-1623
Creator: NVD / NIST
Published: 2019-06-20T03:15:11.213+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 6.7/10EPSS 0.51%

Last modified Jun 17, 2026

CVE-2019-1623 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. A vulnerability in the CLI configuration shell of Cisco Meeting Server could allow an authenticated, local attacker to inject arbitrary commands as the root user. The vulnerability is due to insufficient input validation during the execution of a vulnerable CLI command. EPSS estimates a 0.51% chance of exploitation in the next 30 days.

Description

A vulnerability in the CLI configuration shell of Cisco Meeting Server could allow an authenticated, local attacker to inject arbitrary commands as the root user. The vulnerability is due to insufficient input validation during the execution of a vulnerable CLI command. An attacker with administrator-level credentials could exploit this vulnerability by injecting crafted arguments during command execution. A successful exploit could allow the attacker to perform arbitrary code execution as root on an affected product.

Metrics

CVSS 3.1

6.7/10

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

0.51%

39.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Cisco	Meeting Server	>= 2.2.0, < 2.2.14
Cisco	Meeting Server	>= 2.3.0, < 2.3.8

References

http://www.securityfocus.com/bid/108840Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-cms-codexVendor Advisory
http://www.securityfocus.com/bid/108840Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-cms-codexVendor Advisory

Timeline

Published: Jun 20, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-1623?

How severe is CVE-2019-1623?

CVE-2019-1623 has a CVSS score of 6.7/10 (MEDIUM severity). The EPSS model estimates a 0.51% probability of exploitation in the next 30 days.

How do I fix CVE-2019-1623?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-1623?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST