PT-2019-3324 · Cisco · Cisco Iox+1

Publicado 2019-09-25 · Atualizado 2020-10-08 · CVE-2019-12656

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOx (affected versions not specified)

Description The issue is due to a Transport Layer Security (TLS) implementation problem, which can be exploited by sending specially crafted TLS packets to the IOx web server, resulting in a denial of service (DoS) condition. This allows an unauthenticated, remote attacker to cause the IOx web server to stop processing HTTPS requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-03431

CVE-2019-12656

Produtos afetados

Cisco Iox

Cisco Ios

Referências · 4

• https://bdu.fstec.ru/vul/2019-03431 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-12656 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iox · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-12656 · Aviso do Fabricante