{"schemaVersion":3,"id":"CVE-2019-1848","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critical internal services. The vulnerability is due to insufficient access restriction to ports necessary for system operation. An attacker could exploit this vulnerability by connecting an unauthorized network device to the subnet designated for cluster services. A successful exploit could allow an attacker to reach internal services that are not hardened for external access.","dates":{"published":"2019-06-20T02:55:21.719Z","modified":"2024-11-20T17:17:05.379Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.3,"severity":"critical","version":"3.0","versionLabel":"v3.0","source":"CVE.org","vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":9.3,"severity":"critical","vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":9.3,"severity":"critical","vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.8,"severity":"medium","vector":"AV:A/AC:L/Au:N/C:P/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00729,"percentile":0.53448,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00729},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00729,"percentile":0.53448}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00729,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00729,"percentile":0.53448}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-668","name":"Exposure of Resource to Wrong Sphere","description":"The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/668.html"}],"affected":[{"vendor":"cisco","product":"cisco digital network architecture center (dna center)","name":"Cisco Digital Network Architecture Center (DNA Center)","label":"cisco digital network architecture center (dna center)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 1.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 1.3","eol":null,"hubHref":"/vendor/cisco/cisco_digital_network_architecture_center_dna_center"},{"vendor":"cisco","product":"digital_network_architecture_center","name":"digital network architecture center","label":"digital_network_architecture_center","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3","eol":null,"hubHref":"/vendor/cisco/digital_network_architecture_center"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-dnac-bypass","label":"tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-dnac-bypass","hostname":"tools.cisco.com","tags":["Vendor Advisory","X Refsource CISCO"]},{"url":"http://www.securityfocus.com/bid/108837","label":"www.securityfocus.com/bid/108837","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-06-20T02:55:21.719Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-11-20T17:17:05.379Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T21:19:10.737Z","stale":false,"partial":false}}