CVE-2019-1759

MEDIUM

Cisco IOS XE - Unauthenticated Access Control Bypass via Gigabit Ethernet Management Interface

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-1759. PoCs published by r3m0t3nu11.

AI-analyzed exploit summary This repository contains a functional JavaScript-based exploit for CVE-2019-1759, targeting Bolt CMS 3.6.10. The exploit chains CSRF to upload a malicious PHP file, then bypasses file extension restrictions to achieve remote code execution (RCE).

Description

A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface. The vulnerability is due to a logic error that was introduced in the Cisco IOS XE Software 16.1.1 Release, which prevents the ACL from working when applied against the management interface. An attacker could exploit this issue by attempting to access the device via the management interface.

Exploits (1)

nomisec WORKING POC
by r3m0t3nu11 · poc
https://github.com/r3m0t3nu11/CVE-2019-1759-csrf-js-rce

This repository contains a functional JavaScript-based exploit for CVE-2019-1759, targeting Bolt CMS 3.6.10. The exploit chains CSRF to upload a malicious PHP file, then bypasses file extension restrictions to achieve remote code execution (RCE).

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Bolt CMS 3.6.10
No auth needed
Prerequisites: Victim must visit a malicious page hosting the exploit · Bolt CMS 3.6.10 must be accessible
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/107660

Scores

CVSS v3 5.3
EPSS 0.0440
EPSS Percentile 90.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-284 CWE-287
Status published
Products (45)
cisco/ios_xe 3.2.0ja
cisco/ios_xe 16.2.1
cisco/ios_xe 16.2.2
cisco/ios_xe 16.3.1
cisco/ios_xe 16.3.1a
cisco/ios_xe 16.3.2
cisco/ios_xe 16.3.3
cisco/ios_xe 16.3.4
cisco/ios_xe 16.3.5
cisco/ios_xe 16.3.5b
... and 35 more
Published Mar 28, 2019
Tracked Since Feb 18, 2026