PT-2019-1736 · Cisco · Cisco Ios Xe

Published 2019-03-27 · Updated 2019-10-09 · CVE-2019-1760

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this vulnerability by sending specially crafted smart probe packets at the affected device. A successful exploit could allow the attacker to reload the device, resulting in a denial of service (DoS) attack on an affected system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-01374

CVE-2019-1760

Affected Products

Cisco Ios Xe

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-pfrv3 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01374 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1760 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1760 · Security Note
• https://securityfocus.com/bid/107611 · Note
• http://securityfocus.com/bid/107611 · Note