CVE-2019-1746: falha de alta gravidade em Cisco IOS and IOS XE Software
Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.4epss 0.6%
A vulnerability in the Cluster Management Protocol (CMP) processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation when processing CMP management packets. An attacker could exploit this vulnerability by sending malicious CMP management packets to an affected device. A successful exploit could cause the switch to crash, resulting in a DoS condition. The switch will reload automatically.
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Cisco · Cisco IOS and IOS XE SoftwareCVEs relacionadas — Cisco IOS and IOS XE Software
No mesmo produto, das mais perigosas para as menos.
CVE-2019-1752HIGHCisco IOS and IOS XE Software ISDN Interface Denial of Service VulnerabilityEPSS 2.5%CVE-2019-1747HIGHCisco IOS and IOS XE Software Short Message Service Denial of Service VulnerabilityEPSS 2.4%CVE-2019-1748HIGHCisco IOS and IOS XE Software Network Plug-and-Play Agent Certificate Validation VulnerabilityEPSS 1.2%CVE-2019-1757—Cisco IOS and IOS XE Software Smart Call Home Certificate Validation VulnerabilityEPSS 1.1%CVE-2019-1761MEDIUMCisco IOS and IOS XE Software Hot Standby Router Protocol Information Leak VulnerabilityEPSS 0.6%CVE-2018-0197—Cisco IOS and IOS XE Software VLAN Trunking Protocol Denial of Service VulnerabilityEPSS 0.6%