PT-2019-2126 · Cisco · Cisco Ios Xr

Published 2019-04-17 · Updated 2019-10-09 · CVE-2019-1712

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software versions prior to 6.2.3, 6.3.2, 6.4.0, and 6.5.1

Description A vulnerability in the Protocol Independent Multicast (PIM) feature could allow an unauthenticated, remote attacker to cause the PIM process to restart, resulting in a denial of service condition on an affected device. The vulnerability is due to the incorrect processing of crafted AutoRP packets. An attacker could exploit this vulnerability by sending crafted packets to port UDP 496 on a reachable IP address on the device. A successful exploit could allow the attacker to cause the PIM process to restart.

Recommendations For versions prior to 6.2.3, update to version 6.2.3 or later. For versions prior to 6.3.2, update to version 6.3.2 or later. For versions prior to 6.4.0, update to version 6.4.0 or later. For versions prior to 6.5.1, update to version 6.5.1 or later. As a temporary workaround, consider restricting access to port UDP 496 to minimize the risk of exploitation.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-01887

CVE-2019-1712

Affected Products

Cisco Ios Xr

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-iosxr-pim-dos · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1712 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1712 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01887 · Security Note
• http://securityfocus.com/bid/108025 · Note