CVE-2019-1625

A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow the attacker to make configuration changes to the system as the root user.

• CWE-264

• http://www.securityfocus.com/bid/108844Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-sdwan-privescaVendor Advisory
• http://www.securityfocus.com/bid/108844Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-sdwan-privescaVendor Advisory

Published

Jun 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16244OMERO.server before 5.6.1 allows attackers to bypass the sec…9.8
• CVE-2019-16245OMERO before 5.6.1 makes the details of each user available …5.3
• CVE-2019-16246Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), …9.8
• CVE-2019-16247Delta DCISoft 1.21 has a User Mode Write AV starting at Comm…7.8
• CVE-2019-16248The "delete for" feature in Telegram before 5.11 on Android …5.5
• CVE-2019-16249OpenCV 4.1.1 has an out-of-bounds read in hal_baseline::v_lo…5.3
• CVE-2019-16250includes/wizard/wizard.php in the Ocean Extra plugin through…7.5
• CVE-2019-16251plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Fram…4.3
• CVE-2019-16252Missing SSL Certificate Validation in the Nutfind.com applic…5.9
• CVE-2019-16253The Text-to-speech Engine (aka SamsungTTS) application befor…7.8
• CVE-2019-16254Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2…5.3
• CVE-2019-16255Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2…8.1