PT-2019-3317 · Cisco · Cisco Ios

Publicado 2019-09-25 · Atualizado 2020-10-08 · CVE-2019-12652

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco Catalyst 4000 Series Switches (affected versions not specified)

Description The issue is related to improper resource allocation when processing TCP packets directed to the device on specific Cisco Catalyst 4000 Series Switches. An attacker could exploit this by sending crafted TCP streams to an affected device, causing it to run out of buffer resources. This impairs operations of control plane and management plane protocols, resulting in a denial of service (DoS) condition. The vulnerability can be triggered only by traffic destined to an affected device and cannot be exploited using traffic that transits an affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2019-03424

CVE-2019-12652

Produtos afetados

Cisco Ios

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-12652 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-cat4000-tcp-dos · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-03424 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-12652 · Aviso do Fabricante