PT-2019-3324 · Cisco · Cisco Iox+1

Published 2019-09-25 · Updated 2020-10-08 · CVE-2019-12656

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOx (affected versions not specified)

Description The issue is due to a Transport Layer Security (TLS) implementation problem, which can be exploited by sending specially crafted TLS packets to the IOx web server, resulting in a denial of service (DoS) condition. This allows an unauthenticated, remote attacker to cause the IOx web server to stop processing HTTPS requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-03431

CVE-2019-12656

Affected Products

Cisco Iox

Cisco Ios

References · 4

• https://bdu.fstec.ru/vul/2019-03431 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-12656 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iox · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-12656 · Vendor Advisory