CVE-2019-1858highCWE-20

CVE-2019-1858: falha de alta gravidade em Cisco Firepower Extensible Operating System…

Cisco FXOS and NX-OS Software Simple Network Management Protocol Denial of Service Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco Firepower Extensible Operating System

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.6epss 2.4%
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, which could cause an affected device to restart unexpectedly. The vulnerability is due to improper error handling when processing inbound SNMP packets. An attacker could exploit this vulnerability by sending multiple crafted SNMP packets to an affected device. A successful exploit could allow the attacker to cause the SNMP application to leak system memory because of an improperly handled error condition during packet processing. Over time, this memory leak could cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Cisco · Cisco Firepower Extensible Operating System (FXOS)
CVEs relacionadas — Cisco Firepower Extensible Operating System…

No mesmo produto, das mais perigosas para as menos.

CVE-2019-12699HIGHCisco FXOS Software and Firepower Threat Defense Software Command Injection VulnerabilitiesEPSS 0.9%CVE-2026-20099MEDIUMCisco UCS Manager and FXOS Software Command Injection VulnerabilityEPSS 0.7%CVE-2023-20200HIGHCVE-2023-20200EPSS 0.7%CVE-2019-1700MEDIUMCisco Firepower 9000 Series Firepower 2-Port 100G Double-Width Network Module Queue Wedge Denial of Service VulnerabilityEPSS 0.5%CVE-2020-3169MEDIUMCisco FXOS Software CLI Command Injection VulnerabilityEPSS 0.4%CVE-2020-3545MEDIUMCisco FXOS Software Buffer Overflow VulnerabilityEPSS 0.4%