PT-2019-15173 · Cisco · Catalyst 4500 Series Switches+1

Publicado 2019-03-27 · Atualizado 2019-10-09 · CVE-2019-1750

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software on Catalyst 4500 Series Switches (affected versions not specified)

Description The issue is due to incomplete error handling when processing Cisco Discovery Protocol (CDP) packets used with the Easy Virtual Switching System. An unauthenticated, adjacent attacker could exploit this by sending a specially crafted CDP packet, causing the device to reload and resulting in a denial of service (DoS) condition.

Recommendations For Cisco IOS XE Software on Catalyst 4500 Series Switches, apply the software updates released by Cisco that address this issue. As a temporary workaround, consider implementing workarounds that address this vulnerability, as described in the Cisco Security Advisory.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-388

CWE-20

Identificadores relacionados

CVE-2019-1750

Produtos afetados

Catalyst 4500 Series Switches

Cisco Ios Xe

Referências · 4

• http://securityfocus.com/bid/107607 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-1750 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1750 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-evss · Aviso do Fabricante