CVE-2019-1969

A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP traffic. The vulnerability is due to an incorrect length check when the configured ACL name is the maximum length, which is 32 ASCII characters. An attacker could exploit this vulnerability by performing SNMP polling of an affected device. A successful exploit could allow the attacker to perform SNMP polling that should have been denied. The attacker has no control of the configuration of the SNMP ACL name.

• CWE-264
• CWE-20

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-snmp-bypassVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-snmp-bypassVendor Advisory

Published

Aug 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19683RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerab…9.1
• CVE-2019-19684nopCommerce v4.2.0 allows privilege escalation via file uplo…8.8
• CVE-2019-19685RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerab…8.8
• CVE-2019-19687OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Lea…8.8
• CVE-2019-19688A privilege escalation vulnerability in Trend Micro HouseCal…7.8
• CVE-2019-19689Trend Micro HouseCall for Home Networks (versions below 5.3.…7.8
• CVE-2019-19690Trend Micro Mobile Security for Android (Consumer) versions …9.8
• CVE-2019-19691A vulnerability in Trend Micro Apex One and OfficeScan XG co…4.9
• CVE-2019-19692Trend Micro Apex One (2019) is affected by a cross-site scri…6.1
• CVE-2019-19693The Trend Micro Security 2020 consumer family of products co…7.1
• CVE-2019-19694The Trend Micro Security 2019 (15.0.0.1163 and below) consum…4.7
• CVE-2019-19695A privilege escalation vulnerability in Trend Micro Antiviru…7.5