Read the docs
TI-2019-01571 Aliases CVE-2019-1951GHSA-xpmg-vx7g-292w

Cisco SD-WAN Solution Packet Filtering Bypass Vulnerability

Priority LOW 35CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by crafting a malicious TCP packet with specific characteristics and sending it to a target device. A successful exploit could allow the attacker to bypass the L3 and L4 traffic filters and inject an arbitrary packet in the network.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01455 73rd percentileScored 2026-11-07
Fix Fixed Cisco SD-WAN Solution (Cisco): 19.1.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco SD-WAN Solutionbefore 19.1.019.1.0Patch availableCNA
  • Cisco SD-WAN Solution VendorCisco Affected before 19.1.0 Fixed in 19.1.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*up to 19.1.0VulnerableCisco
  • cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:* Versions up to 19.1.0 Vulnerable ·Cisco

Remediation

  • Fix · CNA Cisco SD-WAN Solution (Cisco) Fixed in 19.1.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-1951
  2. 2026-10-03 Alias added: GHSA-xpmg-vx7g-292w

References

Advisory 1

  • TI-2019-12050 Cisco SD-WAN Solution vManage SQL Injection Vulnerability CVSS 3.1HIGH 8.1
  • TI-2020-02938 Cisco SD-WAN vManage Software Remote Code Execution Vulnerability CVSS 3.1HIGH 8.8
  • TI-2021-01028 Cisco SD-WAN Buffer Overflow Vulnerabilities CVSS 3.1CRITICAL 9.8
  • TI-2021-01027 Cisco SD-WAN Buffer Overflow Vulnerabilities CVSS 3.1CRITICAL 9.8
  • TI-2021-01005 Cisco SD-WAN Denial of Service Vulnerabilities CVSS 3.1HIGH 8.6
  • TI-2021-01001 Cisco SD-WAN Denial of Service Vulnerabilities CVSS 3.1HIGH 8.6
See all 40 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences