CVE-2019-1753

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated but unprivileged (level 1), remote attacker to run privileged Cisco IOS commands by using the web UI. The vulnerability is due to a failure to validate and sanitize input in Web Services Management Agent (WSMA) functions. An attacker could exploit this vulnerability by submitting a malicious payload to the affected device's web UI. A successful exploit could allow the lower-privileged attacker to execute arbitrary commands with higher privileges on the affected device.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/107602Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-iosxe-pePatch, Vendor Advisory
• http://www.securityfocus.com/bid/107602Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-iosxe-pePatch, Vendor Advisory

Published

Mar 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17524An XSS vulnerability on Technicolor TC7300 STFA.51.20 device…5.4
• CVE-2019-17525The login page on D-Link DIR-615 T1 20.10 devices allows rem…8.8
• CVE-2019-17526An issue was discovered in SageMath Sage Cell Server through…9.8
• CVE-2019-17527dataForDepandantField in models/custormfields.php in the JS …9.8
• CVE-2019-17528An issue was discovered in Bento4 1.5.1.0. There is a SEGV i…7.5
• CVE-2019-17529An issue was discovered in Bento4 1.5.1.0. There is a heap-b…7.8
• CVE-2019-17530An issue was discovered in Bento4 1.5.1.0. There is a heap-b…7.8
• CVE-2019-17531A Polymorphic Typing issue was discovered in FasterXML jacks…9.8
• CVE-2019-17532An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11…7.5
• CVE-2019-17533Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certa…8.2
• CVE-2019-17534vips_foreign_load_gif_scan_image in foreign/gifload.c in lib…8.8
• CVE-2019-17535Gila CMS through 1.11.4 allows blog-list.php XSS, in both th…6.1