CVE:CVE-2019-1753
CNNVD:CNNVD-201903-1096
Cisco IOS XE是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。
Cisco IOS XE中的Web UI存在输入验证漏洞，该漏洞程序没有验证及过滤输入。远程攻击者可通过提交恶意的payload利用该漏洞以较高权限执行任意代码。
solution:Upgrade cisco ios_xe to a higher version than 3.2.0ja,3.6.10e,16.6.1,16.6.2,16.6.3,16.7.1,16.7.1a,16.7.1b,16.8.1,16.8.1a,16.8.1b,16.8.1c,16.8.1d,16.8.1e,16.8.1s,and avoid the version 3.2.0ja,3.6.10e,16.6.1,16.6.2,16.6.3,16.7.1,16.7.1a,16.7.1b,16.8.1,16.8.1a,16.8.1b,16.8.1c,16.8.1d,16.8.1e,16.8.1s
solution:Upgrade microsoft visual_studio_2017 to a higher version than 15.9.18,and avoid the version [15.0,15.9.18); Upgrade microsoft visual_studio_2019 to a higher version than 16.4.1,and avoid the version [16.0,16.4.1); Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1