PT-2019-3141 · Cisco · Cisco Iot Field Network Director

Published 2019-08-07 · Updated 2020-10-16 · CVE-2019-1957

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IoT Field Network Director (affected versions not specified)

Description The issue is related to improper handling of Transport Layer Security (TLS) renegotiation requests in the web interface, which could lead to high CPU usage and result in a denial of service (DoS) condition on an affected device. An attacker could exploit this by sending renegotiation requests at a high rate, increasing resource usage and potentially causing a DoS condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2019-03127

CVE-2019-1957

Affected Products

Cisco Iot Field Network Director

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-1957 · Security Note
• https://bdu.fstec.ru/vul/2019-03127 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-fnd-dos · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-1957 · Vendor Advisory