CVE-2019-1648

A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the group configuration. An attacker could exploit this vulnerability by writing a crafted file to the directory where the user group configuration is located in the underlying operating system. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device.

• CWE-264
• CWE-20

• http://www.securityfocus.com/bid/106719Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-sdwan-sol-escalVendor Advisory
• http://www.securityfocus.com/bid/106719Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-sdwan-sol-escalVendor Advisory

Published

Jan 24, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16467Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, a…6.1
• CVE-2019-16468Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, a…7.5
• CVE-2019-16469Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, a…7.5
• CVE-2019-1647A vulnerability in the Cisco SD-WAN Solution could allow an …8
• CVE-2019-16470Adobe Acrobat Reader versions 2019.021.20056 and earlier are…7.8
• CVE-2019-16471Adobe Acrobat Reader versions 2019.021.20056 and earlier are…7.8
• CVE-2019-1649A vulnerability in the logic that handles access control to …6.7
• CVE-2019-1650A vulnerability in the Cisco SD-WAN Solution could allow an …8.8
• CVE-2019-16508The Imagination Technologies driver for Chrome OS before R74…7.8
• CVE-2019-1651A vulnerability in the vContainer of the Cisco SD-WAN Soluti…9.9
• CVE-2019-16510libIEC61850 through 1.3.3 has a use-after-free in MmsServer_…7.5
• CVE-2019-16511An issue was discovered in DTF in FireGiant WiX Toolset befo…5.5