Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2019-1623— Cisco Meeting Server CLI Command Injection Vulnerability

Quick assessment

Affected

Cisco Cisco Meeting Server

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco Meeting Server（Acano Conferencing Server）是美国思科（Cisco）公司的一套包含音频、视频的会议服务器软件。 Cisco Meeting Server中的CLI configuration shell存在命令注入漏洞，该漏洞源于不充分的输入验证。本地攻击者可通过插入特制的参数利用该漏洞以root用户身份执行任意代码。

AI Predicted 8.5 Difficulty: Easy EPSS 0.51% · P43 Updated Feb 23, 2026

Possible ATT&CK Techniques 2 AI

T1059.004 · Unix Shell T1505 · Server Software Component

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2019-1623

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Cisco Meeting Server CLI Command Injection Vulnerability

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability in the CLI configuration shell of Cisco Meeting Server could allow an authenticated, local attacker to inject arbitrary commands as the root user. The vulnerability is due to insufficient input validation during the execution of a vulnerable CLI command. An attacker with administrator-level credentials could exploit this vulnerability by injecting crafted arguments during command execution. A successful exploit could allow the attacker to perform arbitrary code execution as root on an affected product.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

在命令中使用的特殊元素转义处理不恰当(命令注入)

Source: CVE Program / CVE List V5

Vulnerability Title

Cisco Meeting Server 命令注入漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Cisco	Cisco Meeting Server	unspecified ~ 2.2.14	-

II. Public POCs for CVE-2019-1623

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2019-1623

请登录查看更多情报信息。

Vendor Advisories for CVE-2019-1623 (2)

http://www.securityfocus.com/bid/108840 vdb-entry x_refsource_BID
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-cms-codex vendor-advisory x_refsource_CISCO

https://www.cve.org/CVERecord?id=CVE-2019-1623

Same Patch Batch · Cisco · 2019-06-20 · 24 CVEs total

CVE-2019-1631		Cisco Integrated Management Controller Information Disclosure Vulnerability
CVE-2019-1899		Cisco RV110W, RV130W, and RV215W Routers Information Disclosure Vulnerability
CVE-2019-1903		Cisco Security Manager XML Entity Expansion Vulnerability
CVE-2019-1905		Cisco Email Security Appliance GZIP Content Filter Bypass Vulnerability
CVE-2019-1906		Cisco Prime Infrastructure Virtual Domain Privilege Escalation Vulnerability
CVE-2019-1878		Cisco TelePresence Endpoint Command Shell Injection Vulnerability
CVE-2019-1879		Cisco Integrated Management Controller CLI Command Injection Vulnerability
CVE-2019-1897		Cisco RV110W, RV130W, and RV215W Routers Denial of Service Vulnerability
CVE-2019-1898		Cisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability
CVE-2019-1874		Cisco Prime Service Catalog Cross-Site Request Forgery Vulnerability
CVE-2019-1875		Cisco Prime Service Catalog Cross-Site Scripting Vulnerability
CVE-2019-1876		Cisco Wide Area Application Services Software HTTPS Proxy Authentication Bypass Vulnerabil
CVE-2019-1626		Cisco SD-WAN Solution Privilege Escalation Vulnerability
CVE-2019-1632		Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability
CVE-2019-1843		Cisco RV110W, RV130W, and RV215W Routers Management Interface Denial of Service Vulnerabil
CVE-2019-1848		Cisco DNA Center Authentication Bypass Vulnerability
CVE-2019-1869		Cisco StarOS Denial of Service Vulnerability
CVE-2019-1627		Cisco Integrated Management Controller Information Disclosure Vulnerability
CVE-2019-1628		Cisco Integrated Management Controller Denial of Service Vulnerability
CVE-2019-1629		Cisco Integrated Management Controller Arbitrary File Write Vulnerability

Showing top 20 of 24 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Cisco Meeting Server

Same vendor: Cisco

Same weakness: CWE-77