PT-2019-3141 · Cisco · Cisco Iot Field Network Director

Publicado 2019-08-07 · Atualizado 2020-10-16 · CVE-2019-1957

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IoT Field Network Director (affected versions not specified)

Description The issue is related to improper handling of Transport Layer Security (TLS) renegotiation requests in the web interface, which could lead to high CPU usage and result in a denial of service (DoS) condition on an affected device. An attacker could exploit this by sending renegotiation requests at a high rate, increasing resource usage and potentially causing a DoS condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2019-03127

CVE-2019-1957

Produtos afetados

Cisco Iot Field Network Director

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-1957 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-03127 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-fnd-dos · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-1957 · Aviso do Fabricante