[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fs2zAVB4F70SUajEmEOC_3ahxKVT_AeGbgcev1Zz3n5Y":3,"g5a-risk:CVE-2019-12624":212},{"success":4,"data":5,"meta":210},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":15,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":108,"references":109,"referencesCount":115,"weaknesses":116,"weaknessesCount":115,"isActivelyExploited":125,"cisaInfo":15,"otxData":15,"relatedBlogPosts":126,"seoMetadata":127,"configurations":152,"relatedVendorCves":201,"notableEvents":202},"CVE-2019-12624","What is CVE-2019-12624?","A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on an affected device by using a web browser and with the privileges of the user.","A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could allow an unauthenticated, remote attack...","2019-08-21T19:15:13.123","2019-10-09T23:45:54.967",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":34,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",2.8,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"ykramarz@cisco.com","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},[35],{"Source":18,"Type":19,"CVSSData":36,"BaseSeverity":39,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":37,"VectorString":38,"AccessVector":22,"AccessComplexity":39,"Authentication":24,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.18186,[44,44,44,44,44,44,44],"High",[48,53,57,60,63,66,69,72,75,78,81,84,87,90,93,96,99,102,105],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"cisco","ios_xe","*","cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":55,"criteria":56,"vulnerable":4},"5760_wireless_lan_controller","-","cpe:2.3:h:cisco:5760_wireless_lan_controller:-:*:*:*:*:*:*:*",{"vendor":49,"product":58,"version":55,"criteria":59,"vulnerable":4},"catalyst_3650-12x48uq","cpe:2.3:h:cisco:catalyst_3650-12x48uq:-:*:*:*:*:*:*:*",{"vendor":49,"product":61,"version":55,"criteria":62,"vulnerable":4},"catalyst_3650-12x48ur","cpe:2.3:h:cisco:catalyst_3650-12x48ur:-:*:*:*:*:*:*:*",{"vendor":49,"product":64,"version":55,"criteria":65,"vulnerable":4},"catalyst_3650-12x48uz","cpe:2.3:h:cisco:catalyst_3650-12x48uz:-:*:*:*:*:*:*:*",{"vendor":49,"product":67,"version":55,"criteria":68,"vulnerable":4},"catalyst_3650-24pd","cpe:2.3:h:cisco:catalyst_3650-24pd:-:*:*:*:*:*:*:*",{"vendor":49,"product":70,"version":55,"criteria":71,"vulnerable":4},"catalyst_3650-24pdm","cpe:2.3:h:cisco:catalyst_3650-24pdm:-:*:*:*:*:*:*:*",{"vendor":49,"product":73,"version":55,"criteria":74,"vulnerable":4},"catalyst_3650-48fq","cpe:2.3:h:cisco:catalyst_3650-48fq:-:*:*:*:*:*:*:*",{"vendor":49,"product":76,"version":55,"criteria":77,"vulnerable":4},"catalyst_3650-48fqm","cpe:2.3:h:cisco:catalyst_3650-48fqm:-:*:*:*:*:*:*:*",{"vendor":49,"product":79,"version":55,"criteria":80,"vulnerable":4},"catalyst_3650-8x24uq","cpe:2.3:h:cisco:catalyst_3650-8x24uq:-:*:*:*:*:*:*:*",{"vendor":49,"product":82,"version":55,"criteria":83,"vulnerable":4},"catalyst_3850-12x48u","cpe:2.3:h:cisco:catalyst_3850-12x48u:-:*:*:*:*:*:*:*",{"vendor":49,"product":85,"version":55,"criteria":86,"vulnerable":4},"catalyst_3850-24u","cpe:2.3:h:cisco:catalyst_3850-24u:-:*:*:*:*:*:*:*",{"vendor":49,"product":88,"version":55,"criteria":89,"vulnerable":4},"catalyst_3850-24xs","cpe:2.3:h:cisco:catalyst_3850-24xs:-:*:*:*:*:*:*:*",{"vendor":49,"product":91,"version":55,"criteria":92,"vulnerable":4},"catalyst_3850-24xu","cpe:2.3:h:cisco:catalyst_3850-24xu:-:*:*:*:*:*:*:*",{"vendor":49,"product":94,"version":55,"criteria":95,"vulnerable":4},"catalyst_3850-48u","cpe:2.3:h:cisco:catalyst_3850-48u:-:*:*:*:*:*:*:*",{"vendor":49,"product":97,"version":55,"criteria":98,"vulnerable":4},"catalyst_3850-48xs","cpe:2.3:h:cisco:catalyst_3850-48xs:-:*:*:*:*:*:*:*",{"vendor":49,"product":100,"version":55,"criteria":101,"vulnerable":4},"catalyst_3850-nm-2-40g","cpe:2.3:h:cisco:catalyst_3850-nm-2-40g:-:*:*:*:*:*:*:*",{"vendor":49,"product":103,"version":55,"criteria":104,"vulnerable":4},"catalyst_3850-nm-8-10g","cpe:2.3:h:cisco:catalyst_3850-nm-8-10g:-:*:*:*:*:*:*:*",{"vendor":49,"product":106,"version":55,"criteria":107,"vulnerable":4},"catalyst_4500e_supervisor_engine_8-e","cpe:2.3:h:cisco:catalyst_4500e_supervisor_engine_8-e:-:*:*:*:*:*:*:*",19,[110],{"url":111,"source":112,"tags":113},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-20190821-iosxe-ngwc-csrf","Cisco",[114],"Vendor Advisory",1,[117],{"id":118,"name":119,"description":120,"extendedDescription":121,"status":122,"abstraction":123,"structure":124},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",false,[],{"title":128,"metaDescription":129,"keywords":130,"canonicalUrl":131,"structuredData":132},"What is CVE-2019-12624? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-12624, a high severity cyber security vulnerability from 2019. A vulnerability in the web-based management interface of Ci...","CVE-2019-12624, CVE-2019-12624 vulnerability, CVE-2019-12624 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, cisco security, ios_xe vulnerability, 5760_wireless_lan_controller vulnerability, catalyst_3650-12x48uq vulnerability, catalyst_3650-12x48ur vulnerability, catalyst_3650-12x48uz vulnerability","\u002Fwhat-is\u002Fcve-2019-12624",{"@context":133,"@type":134,"headline":128,"description":129,"datePublished":10,"dateModified":11,"author":135,"publisher":139,"about":143,"mainEntityOfPage":147,"articleSection":150,"keywords":151},"https:\u002F\u002Fschema.org","TechArticle",{"@type":136,"name":137,"url":138},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":136,"name":137,"url":138,"logo":140},{"@type":141,"url":142},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":144,"name":6,"description":145,"additionalType":146},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":148,"@id":149},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-12624","Cybersecurity","CVE-2019-12624, CVE-2019-12624 vulnerability, CVE-2019-12624 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[153],{"Operator":154,"Negate":15,"Nodes":155},"AND",[156,163],{"Operator":157,"Negate":15,"CPEMatch":158},"OR",[159],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":160,"VersionStartExcluding":15,"VersionStartIncluding":161,"VersionEndExcluding":15,"VersionEndIncluding":162},"2AB8301D-DD09-413A-B23F-DFCCCAFF3BEE","3.0.xe","3.11.xe",{"Operator":157,"Negate":15,"CPEMatch":164},[165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197,199],{"Vulnerable":15,"Criteria":56,"MatchCriteriaID":166,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"26135CFB-8A7D-46D5-97DF-D60B176F578A",{"Vulnerable":15,"Criteria":59,"MatchCriteriaID":168,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7434059A-25B8-4FAC-A756-6E571348B76E",{"Vulnerable":15,"Criteria":62,"MatchCriteriaID":170,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"858FEECF-CC69-4E68-8E8A-674643021964",{"Vulnerable":15,"Criteria":65,"MatchCriteriaID":172,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"91B9F022-4C3D-493E-9418-E9CDDAFEC9B1",{"Vulnerable":15,"Criteria":68,"MatchCriteriaID":174,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8904EAF5-25E7-4A6B-8117-1859F913B83B",{"Vulnerable":15,"Criteria":71,"MatchCriteriaID":176,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"59A990D6-B748-4AFD-B924-1D19680BD3DB",{"Vulnerable":15,"Criteria":74,"MatchCriteriaID":178,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"426B68A6-3A41-43DB-846F-AEFBA62E221B",{"Vulnerable":15,"Criteria":77,"MatchCriteriaID":180,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9C96215F-A300-4B4E-9D3A-C32E484BFC5B",{"Vulnerable":15,"Criteria":80,"MatchCriteriaID":182,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"991CBDFB-6836-4D1F-80A9-14EBCE3F855F",{"Vulnerable":15,"Criteria":83,"MatchCriteriaID":184,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C8F7FAA3-003D-4BEE-99CC-C9F75D5293FC",{"Vulnerable":15,"Criteria":86,"MatchCriteriaID":186,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EC5CB558-BD42-4615-BC31-41CCF25DE5C9",{"Vulnerable":15,"Criteria":89,"MatchCriteriaID":188,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"295C46B4-5E9F-4DD8-861B-00BA43923306",{"Vulnerable":15,"Criteria":92,"MatchCriteriaID":190,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F840171D-CA1C-4E25-BD41-6B871C47BB84",{"Vulnerable":15,"Criteria":95,"MatchCriteriaID":192,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"47E4D5A8-7E4A-44C5-81DC-84712781206D",{"Vulnerable":15,"Criteria":98,"MatchCriteriaID":194,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F8E9B149-AA2B-4421-8CC3-5A4B32B7AADF",{"Vulnerable":15,"Criteria":101,"MatchCriteriaID":196,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"35490BDE-DF21-495E-9F8A-7631FCB32A1F",{"Vulnerable":15,"Criteria":104,"MatchCriteriaID":198,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"20EFB5B8-4A38-48C5-A363-3C7F7763C1D5",{"Vulnerable":15,"Criteria":107,"MatchCriteriaID":200,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E1C30EF3-A63D-4022-A032-77C376AD9DA4",[],[203],{"id":204,"eventType":205,"eventTime":206,"details":207,"label":208,"color":209},"241450a0-9679-4e15-a3ac-fc4384db9b8b","HIGH_EPSS_DELTA","2026-06-16T04:06:06.790632+00:00","Daily EPSS score increased by 0.183 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":211,"version":37},1792430176981,{"score":213,"band":214,"action":215,"scoredAt":216},49,"Medium","Plan remediation","2026-10-19T07:01:17.783851+00:00"]