[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fe0nvRanKDBcsI_JkDQi8Whv5FAD55DIfbIoWhf7_qdA":3,"g5a-risk:CVE-2019-12643":163},{"success":4,"data":5,"meta":161},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":74,"references":75,"referencesCount":81,"weaknesses":82,"weaknessesCount":81,"isActivelyExploited":91,"cisaInfo":15,"otxData":15,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":145,"notableEvents":146},"CVE-2019-12643","What is CVE-2019-12643?","A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on the managed Cisco IOS XE device. The vulnerability is due to an improper check performed by the area of code that manages the REST API authentication service. An attacker could exploit this vulnerability by submitting malicious HTTP requests to the targeted device. A successful exploit could allow the attacker to obtain the token-id of an authenticated user. This token-id could be used to bypass authentication and execute privileged actions through the interface of the REST API virtual service container on the affected Cisco IOS XE device. The REST API interface is not enabled by default and must be installed and activated separately on IOS XE devices. See the Details section for more information.","A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentic...","2019-08-28T19:15:10.757","2019-10-09T23:45:56.513",10,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":34,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",3.9,6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"ykramarz@cisco.com","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},[35],{"Source":18,"Type":19,"CVSSData":36,"BaseSeverity":26,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":37,"VectorString":38,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",0.05324,[40,40,40,40,40,40,40],"Critical",[44,49,52,56,59,62,65,68,71],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"cisco","ios_xe","15.5\\(3\\)s3.16","cpe:2.3:o:cisco:ios_xe:15.5\\(3\\)s3.16:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"16.6.5","cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",{"vendor":45,"product":53,"version":54,"criteria":55,"vulnerable":4},"4221_integrated_services_router","-","cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",{"vendor":45,"product":57,"version":54,"criteria":58,"vulnerable":4},"4321_integrated_services_router","cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",{"vendor":45,"product":60,"version":54,"criteria":61,"vulnerable":4},"4331_integrated_services_router","cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",{"vendor":45,"product":63,"version":54,"criteria":64,"vulnerable":4},"4351_integrated_services_router","cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",{"vendor":45,"product":66,"version":54,"criteria":67,"vulnerable":4},"4431_integrated_services_router","cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",{"vendor":45,"product":69,"version":54,"criteria":70,"vulnerable":4},"4451-x_integrated_services_router","cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*",{"vendor":45,"product":72,"version":54,"criteria":73,"vulnerable":4},"cloud_services_router_1000v","cpe:2.3:h:cisco:cloud_services_router_1000v:-:*:*:*:*:*:*:*",9,[76],{"url":77,"source":78,"tags":79},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-20190828-iosxe-rest-auth-bypass","Cisco",[80],"Vendor Advisory",1,[83],{"id":84,"name":85,"description":86,"extendedDescription":87,"status":88,"abstraction":89,"structure":90},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2019-12643? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-12643, a critical severity cyber security vulnerability from 2019. A vulnerability in the Cisco REST API virtual service c...","CVE-2019-12643, CVE-2019-12643 vulnerability, CVE-2019-12643 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, cisco security, ios_xe vulnerability, 4221_integrated_services_router vulnerability, 4321_integrated_services_router vulnerability, 4331_integrated_services_router vulnerability, 4351_integrated_services_router vulnerability","\u002Fwhat-is\u002Fcve-2019-12643",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-12643","Cybersecurity","CVE-2019-12643, CVE-2019-12643 vulnerability, CVE-2019-12643 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119],{"Operator":120,"Negate":15,"Nodes":121},"AND",[122,129],{"Operator":123,"Negate":15,"CPEMatch":124},"OR",[125,127],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":126,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"0FE2B344-03AB-44B5-9889-B702AFC57F53",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":128,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D83E34F4-F4DD-49CC-9C95-93F9D4D26B42",{"Operator":123,"Negate":15,"CPEMatch":130},[131,133,135,137,139,141,143],{"Vulnerable":15,"Criteria":55,"MatchCriteriaID":132,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"6C8AED7C-DDA3-4C29-BB95-6518C02C551A",{"Vulnerable":15,"Criteria":58,"MatchCriteriaID":134,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9421DBEF-AE42-4234-B49F-FCC34B804D7F",{"Vulnerable":15,"Criteria":61,"MatchCriteriaID":136,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5419CB9F-241F-4431-914F-2659BE27BEA5",{"Vulnerable":15,"Criteria":64,"MatchCriteriaID":138,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2",{"Vulnerable":15,"Criteria":67,"MatchCriteriaID":140,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5720462A-BE6B-4E84-A1A1-01E80BBA86AD",{"Vulnerable":15,"Criteria":70,"MatchCriteriaID":142,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"818CEFA6-208C-43C3-8E43-474A93ADCF21",{"Vulnerable":15,"Criteria":73,"MatchCriteriaID":144,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4CCB8270-A01D-40A6-BF4B-26BAF65E68F3",[],[147,154],{"id":148,"eventType":149,"eventTime":150,"details":151,"label":152,"color":153},"bd810b58-6c79-4229-ac29-128577e42113","HIGH_EPSS_DELTA","2025-11-19T04:06:38.817338+00:00","Daily EPSS score increased by 0.111 on 2023-12-30","EPSS Score Increased","red",{"id":155,"eventType":156,"eventTime":157,"details":158,"label":159,"color":160},"db595194-3fd2-4fb6-b277-960363625c2a","LOW_EPSS_DELTA","2025-11-22T04:06:26.779605+00:00","Daily EPSS score decreased by 0.111 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":162,"version":37},1792353191420,{"score":164,"band":165,"action":166,"scoredAt":167},55,"Medium","Plan remediation","2026-10-16T06:46:46.820984+00:00"]