CVE-2019-1645— Cisco Connected Mobile Experiences Information Disclosure Vulnerability
Quick assessment
Affected
Cisco Cisco Connected Mobile Experiences
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Connected Mobile Experiences（CMX）Software是美国思科（Cisco）公司的一套互联移动体验解决方案。 Cisco CMX Software中存在信息泄露漏洞，该漏洞源于程序缺少对GET请求的验证和输入检查机制。攻击者可通过发送HTTP GET请求利用该漏洞访问敏感数据。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-1645
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Connected Mobile Experiences Information Disclosure Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the Cisco Connected Mobile Experiences (CMX) software could allow an unauthenticated, adjacent attacker to access sensitive data on an affected device. The vulnerability is due to a lack of input and validation checking mechanisms for certain GET requests to API's on an affected device. An attacker could exploit this vulnerability by sending HTTP GET requests to an affected device. An exploit could allow the attacker to use this information to conduct additional reconnaissance attacks.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Connected Mobile Experiences Software 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Connected Mobile Experiences（CMX）Software是美国思科（Cisco）公司的一套互联移动体验解决方案。 Cisco CMX Software中存在信息泄露漏洞，该漏洞源于程序缺少对GET请求的验证和输入检查机制。攻击者可通过发送HTTP GET请求利用该漏洞访问敏感数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Connected Mobile Experiences | n/a | - |
|
II. Public POCs for CVE-2019-1645
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-1645
请登录查看更多情报信息。
Vendor Advisories for CVE-2019-1645 (2)
-
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-cmx-info-discl vendor-advisory x_refsource_CISCO
Same Patch Batch · Cisco · 2019-01-24 · 14 CVEs total
| CVE-2019-1652 | Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability | |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | |
| CVE-2019-1655 | Cisco Webex Meetings Server Cross-Site Scripting Vulnerability | |
| CVE-2019-1656 | Cisco Enterprise NFV Infrastructure Software Linux Shell Access Vulnerability | |
| CVE-2019-1657 | Cisco AMP Threat Grid API Key Information Disclosure Vulnerability | |
| CVE-2019-1658 | Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability | |
| CVE-2019-1668 | Cisco SocialMiner Chat Feed Cross-Site Scripting Vulnerability | |
| CVE-2019-1669 | Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerabi | |
| CVE-2019-1646 | Privilege Escalation Vulnerability in Cisco SD-WAN Solution | |
| CVE-2019-1647 | Cisco SD-WAN Solution Unauthorized Access Vulnerability | |
| CVE-2019-1648 | Cisco SD-WAN Solution Privilege Escalation Vulnerability | |
| CVE-2019-1650 | Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability | |
| CVE-2019-1651 | Cisco SD-WAN Solution Buffer Overflow Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Connected Mobile Experiences
-
CVE-2021-1522
Cisco Connected Mobile Experiences Strong Authentication Req -
CVE-2021-1144
Cisco Connected Mobile Experiences Privilege Escalation Vuln -
CVE-2021-1143
Cisco Connected Mobile Experiences User Enumeration Vulnerab -
CVE-2020-3151
Cisco Connected Mobile Experiences Restricted Shell Escape V -
CVE-2020-3152
Cisco Connected Mobile Experiences Privilege Escalation Vuln
Same vendor: Cisco
-
CVE-2026-20320
Cisco BroadWorks OCI解析器XEE漏洞 -
CVE-2026-20327
Cisco Unified Intelligence Center SQL Injection Vulnerabilit -
CVE-2026-20314
Cisco Packaged Contact Center Enterprise & Cisco Unified Con -
CVE-2026-20319
Cisco Secure Workload Software Security Hardening Release Au -
CVE-2026-20315
Cisco Secure Workload Software Security Hardening Release Au
Same weakness: CWE-200
-
CVE-2026-77507
Weblate: Object-scoped RSS feeds disclose private change his -
CVE-2026-62249
Weblate: Restricted-component change history leaked to non-m -
CVE-2026-48786
Fleet: Observer-class users can view team enroll secrets and -
CVE-2026-54553
Starlette-Admin: Unvalidated `order_by` parameter allows ord -
CVE-2026-80194
Kimai before 2.64.0 Missing Authorization via ProjectViewCon
V. Comments for CVE-2019-1645
No comments yet