CVE-2019-1867

CVE-2019-1867 is a critical authentication bypass vulnerability in the REST API of Cisco Elastic Services Controller (ESC). An unauthenticated, remote attacker can exploit this flaw by sending a crafted request, allowing them to execute arbitrary administrative actions. With a CVSS score of 10.0, this vulnerability poses a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness of its severity.