PT-2019-2439 · Cisco · Cisco Staros

Publicado 2019-06-19 · Atualizado 2019-10-09 · CVE-2019-1869

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco StarOS (affected versions not specified)

Description A logic error in the internal packet-processing functionality of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition. The vulnerability can be exploited by sending a series of crafted packets to an affected device, which could prevent the targeted service interface from receiving any traffic. Successful exploitation may require manual reloading of the device to recover.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Access of Uninitialized Pointer

Enumeração de Fraquezas

CWE-824

Identificadores relacionados

BDU:2019-02217

CVE-2019-1869

Produtos afetados

Cisco Staros

Referências · 8

• https://tools.cisco.com/security/center/publicationListing.x?product=Cisco&last_published=2019+Jun&sort=-day_sir&limit=50#~Vulnerabilities · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-staros-asr-dos · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-1869 · Nota de Segurança
• https://tools.cisco.com/security/center/publicationListing.x?product=Cisco&last_published=2019+Jun&sort=-day_sir&limit=50#~Vulnerabilities · Nota
• https://bdu.fstec.ru/vul/2019-02217 · Nota de Segurança
• https://vuldb.com/?id.136733 · Nota
• http://securityfocus.com/bid/108853 · Nota
• https://osv.dev/vulnerability/CVE-2019-1869 · Aviso do Fabricante