CVE-2019-1953— Cisco Enterprise NFV Infrastructure Software Password Recovery Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-1953
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Enterprise NFV Infrastructure Software Password Recovery Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in clear text. The vulnerability is due to incorrectly logging the admin password when a user is forced to modify the default password when logging in to the web portal for the first time. Subsequent password changes are not logged and other accounts are not affected. An attacker could exploit this vulnerability by viewing the admin clear text password and using it to access the affected system. The attacker would need a valid user account to exploit this vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
通过日志文件的信息暴露
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Enterprise NFV Infrastructure Software 日志信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Enterprise NFV Infrastructure Software（NFVIS）是美国思科（Cisco）公司的一套NVF基础架构软件平台。该平台可以通过中央协调器和控制器实现虚拟化服务的全生命周期管理。 Cisco Enterprise NFVIS 3.9.1之前版本中的Web门户存在日志文件泄露漏洞，该漏洞源于在用户首次登录该门户并被强制要求更改默认密码时，程序没有正确地记录admin密码。远程攻击者可利用该漏洞查看明文形式的密码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Enterprise NFV Infrastructure Software | unspecified ~ 3.9.1 | - |
II. Public POCs for CVE-2019-1953
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-1953
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-nfv-pwrecovvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2019-1953
Same Patch Batch · Cisco · 2019-08-08 · 17 CVEs total
| CVE-2019-1973 | Cisco Enterprise NFV Infrastructure Software Cross-site Scripting Vulnerability | |
| CVE-2019-1959 | Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities | |
| CVE-2019-1960 | Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities | |
| CVE-2019-1961 | Cisco Enterprise NFV Infrastructure Software Web Portal Arbitrary File Read Vulnerability | |
| CVE-2019-1970 | Cisco Firepower Threat Defense Software File Policy Bypass Vulnerability | |
| CVE-2019-1971 | Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability | |
| CVE-2019-1972 | Cisco Enterprise NFV Infrastructure Software Privilege Escalation Vulnerability | |
| CVE-2019-1954 | Cisco Webex Meetings Server Open Redirection Vulnerability | |
| CVE-2019-1955 | Cisco Email Security Appliance Header Injection Vulnerability | |
| CVE-2019-1956 | Cisco SPA112 2-Port Phone Adapter Stored Cross-Site Scripting Vulnerability | |
| CVE-2019-1957 | Cisco IoT Field Network Director TLS Renegotiation Denial of Service Vulnerability | |
| CVE-2019-1958 | Cisco HyperFlex Software Cross-Site Request Forgery Vulnerability | |
| CVE-2019-1949 | Cisco Firepower Management Center Persistent Cross-Site Scripting Vulnerability | |
| CVE-2019-1951 | Cisco SD-WAN Solution Packet Filtering Bypass Vulnerability | |
| CVE-2019-1952 | Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability | |
| CVE-2019-1946 | Cisco Enterprise NFV Infrastructure Software Web-Based Management Interface Authentication |
IV. Related Vulnerabilities
Same product: Cisco Enterprise NFV Infrastructure Software
- CVE-2026-20090
Cisco Integrated Management Controller Cross-Site Scripting - CVE-2026-20089
Cisco Integrated Management Controller Cross-Site Scripting - CVE-2026-20087
Cisco Integrated Management Controller Cross-Site Scripting - CVE-2026-20088
Cisco Integrated Management Controller Cross-Site Scripting - CVE-2026-20096
Cisco Integrated Management Controller Command Injection Vul
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-532
- CVE-2026-42282
n8n-MCP: Sensitive MCP tool-call arguments logged on authent - CVE-2026-41495
n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Req - CVE-2026-41004
VMware Spring Cloud Config 日志信息泄露漏洞 - CVE-2024-30151
HCL BigFix Service Management (SM) is susceptible to Broken - CVE-2026-7824
PaperCut Hive (Ricoh): Plain text password in logs
V. Comments for CVE-2019-1953
No comments yet