What is CVE-2019-12648?

CVE-2019-12648 is a high-severity vulnerability in Cisco 807_industrial_integrated_services_routers, classified under Improper Access Control. CVSS score: 8.8/10. Published 2019-09-25.

How severe is CVE-2019-12648?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in Cisco 807_industrial_integrated_services_routers

CVE-2019-12648

A vulnerability in the IOx application environment for Cisco IOS Software could allow an authenticated, remote attacker to gain unauthorized access to the Guest Operating System (Guest OS) running on an affected device. The vulnerability i…

EPSS: 0.024 (81.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cisco 807_industrial_integrated_services_routers
Cisco 809_industrial_integrated_services_routers
Cisco 829_industrial_integrated_services_routers
Cisco Cgr_1120
Cisco Cgr1240
Cisco Ios 15.7(3)m — versions unspecified
Cisco Ios — versions 15.7\(3\)m3

Weakness classification (CWE)

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2019-12648?: CVE-2019-12648 is a high-severity vulnerability in Cisco 807_industrial_integrated_services_routers, classified under Improper Access Control. CVSS score: 8.8/10. Published 2019-09-25.
How severe is CVE-2019-12648?: High severity. CVSS v3 base score is 8.8 out of 10.