CVE-2019-1688

A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of Service (DoS) condition on the server. The vulnerability is due to a fault in the password management system of NAE. An attacker could exploit this vulnerability by authenticating with the default administrator password via the CLI of an affected server. A successful exploit could allow the attacker to view potentially sensitive information or bring the server down, causing a DoS condition. This vulnerability affects Cisco Network Assurance Engine (NAE) Release 3.0(1). The default password condition only affects new installations of Release 3.0(1).

• CWE-798
• CWE-798

• http://www.securityfocus.com/bid/107010Broken Link, Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190212-nae-dosVendor Advisory
• http://www.securityfocus.com/bid/107010Broken Link, Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190212-nae-dosVendor Advisory

Published

Feb 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16873Portainer before 1.22.1 has XSS (issue 1 of 2).5.4
• CVE-2019-16874Portainer before 1.22.1 has Incorrect Access Control (issue …6.5
• CVE-2019-16876Portainer before 1.22.1 allows Directory Traversal.7.5
• CVE-2019-16877Portainer before 1.22.1 has Incorrect Access Control (issue …8.8
• CVE-2019-16878Portainer before 1.22.1 has XSS (issue 2 of 2).5.4
• CVE-2019-16879The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, wi…9.8
• CVE-2019-16880An issue was discovered in the linea crate through 0.9.4 for…9.8
• CVE-2019-16881An issue was discovered in the portaudio-rs crate through 0.…9.8
• CVE-2019-16882An issue was discovered in the string-interner crate before …7.5
• CVE-2019-16884runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce…7.5
• CVE-2019-16885In OkayCMS through 2.3.4, an unauthenticated attacker can ac…9.8
• CVE-2019-16887In IrfanView 4.53, Data from a Faulting Address controls a s…7.8