PT-2019-1717 · Cisco · Cisco Ios+1

Published 2019-03-27 · Updated 2024-03-04 · CVE-2019-1752

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software (affected versions not specified)

Description A vulnerability in the ISDN functions of the software could allow an unauthenticated, remote attacker to cause the device to reload. The issue is due to incorrect processing of specific values in the Q.931 information elements. An attacker could exploit this by calling the affected device with specific Q.931 information elements being present, resulting in a denial of service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-01337

CVE-2019-1752

Affected Products

Cisco Ios

Cisco Ios Xe

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-isdn · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01337 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-1752 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1752 · Vendor Advisory
• http://securityfocus.com/bid/107589 · Note