PT-2019-2439 · Cisco · Cisco Staros

Published 2019-06-19 · Updated 2019-10-09 · CVE-2019-1869

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco StarOS (affected versions not specified)

Description A logic error in the internal packet-processing functionality of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition. The vulnerability can be exploited by sending a series of crafted packets to an affected device, which could prevent the targeted service interface from receiving any traffic. Successful exploitation may require manual reloading of the device to recover.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

BDU:2019-02217

CVE-2019-1869

Affected Products

Cisco Staros

References · 8

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-staros-asr-dos · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1869 · Security Note
• https://bdu.fstec.ru/vul/2019-02217 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1869 · Vendor Advisory
• https://tools.cisco.com/security/center/publicationListing.x?product=Cisco&last_published=2019+Jun&sort=-day_sir&limit=50#~Vulnerabilities · Note
• https://tools.cisco.com/security/center/publicationListing.x?product=Cisco&last_published=2019+Jun&sort=-day_sir&limit=50#~Vulnerabilities · Note
• https://vuldb.com/?id.136733 · Note
• http://securityfocus.com/bid/108853 · Note