What is CVE-2019-16005?

CVE-2019-16005 is a high-severity vulnerability in Cisco Webex Video Mesh, classified under Command Injection. CVSS score: 7.2/10. Published 2020-01-26.

How severe is CVE-2019-16005?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Cisco Webex Video Mesh

CVE-2019-16005

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The vulnerability is due to improper validation of user-sup…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.035 (88.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cisco Webex Video Mesh — versions unspecified
Cisco Collaboration_meeting_rooms — versions 2.0
Cisco Webex_video_mesh

Weakness classification (CWE)

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2019-16005?: CVE-2019-16005 is a high-severity vulnerability in Cisco Webex Video Mesh, classified under Command Injection. CVSS score: 7.2/10. Published 2020-01-26.
How severe is CVE-2019-16005?: High severity. CVSS v3 base score is 7.2 out of 10.