CVE-2019-1940

A vulnerability in the Web Services Management Agent (WSMA) feature of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid X.509 certificate. The vulnerability is due to insufficient X.509 certificate validation when establishing a WSMA connection. An attacker could exploit this vulnerability by supplying a crafted X.509 certificate during the WSMA connection setup phase. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on WSMA connections to the affected software. At the time of publication, this vulnerability affected Cisco IND Software releases prior to 1.7.

• CWE-310
• CWE-295

• http://www.securityfocus.com/bid/109296Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-wsma-infoVendor Advisory
• http://www.securityfocus.com/bid/109296Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-wsma-infoVendor Advisory

Published

Jul 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19392The forDNN.UsersExportImport module before 1.2.0 for DNN (fo…9.8
• CVE-2019-19393The Web application on Rittal CMC PU III 7030.000 V3.00 V3.1…6.1
• CVE-2019-19394Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and …6.1
• CVE-2019-19396illumos, as used in OmniOS Community Edition before r151030y…7.5
• CVE-2019-19397There is a weak algorithm vulnerability in some Huawei produ…7.5
• CVE-2019-19398M5 lite 10 with versions of 8.0.0.182(C00) have an insuffici…9.8
• CVE-2019-1941A vulnerability in the web-based management interface of Cis…6.1
• CVE-2019-19411USG9500 with versions of V500R001C30SPC100, V500R001C30SPC20…3.7
• CVE-2019-19412Huawei smart phones have a Factory Reset Protection (FRP) by…4.6
• CVE-2019-19413There is an integer overflow vulnerability in LDAP client of…7.5
• CVE-2019-19414There is an integer overflow vulnerability in LDAP server of…7.5
• CVE-2019-19415The SIP module of some Huawei products have a denial of serv…7.5