CVE-2019-1841: Cisco DNA Center Unintended Proxy Via SWIM Import Interface Vulnerability

Severity: high (CVSS 8.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-04-18 · updated 2026-06-17
Weakness: CWE-441

Description

A vulnerability in the Software Image Management feature of Cisco DNA Center could allow an authenticated, remote attacker to access to internal services without additional authentication. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending arbitrary HTTP requests to internal services. An exploit could allow the attacker to bypass any firewall or other protections to access unauthorized internal services. DNAC versions prior to 1.2.5 are affected.

Affected products

Cisco Digital Network Architecture Center (DNA Center): before 1.2.5 — fixed in 1.2.5

How to fix

Upgrade to a fixed version: Cisco Digital Network Architecture Center (DNA Center) 1.2.5. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-1841 or the next vulnerability affects your stack