PT-2019-1736 · Cisco · Cisco Ios Xe

Publicado 2019-03-27 · Atualizado 2019-10-09 · CVE-2019-1760

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this vulnerability by sending specially crafted smart probe packets at the affected device. A successful exploit could allow the attacker to reload the device, resulting in a denial of service (DoS) attack on an affected system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-01374

CVE-2019-1760

Produtos afetados

Cisco Ios Xe

Referências · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-pfrv3 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-01374 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1760 · Aviso do Fabricante
• https://securityfocus.com/bid/107611 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-1760 · Nota de Segurança
• http://securityfocus.com/bid/107611 · Nota