Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-12663

A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of attributes in RADIUS messages. An attacker could exploit this vulnerability by sending a malicious RADIUS message to an affected device while the device is in a specific state.

Published

2019-09-25T21:15:11.267

Last Modified

2024-11-21T04:23:18.320

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.6 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios_xe 16.6.4 Yes
Operating System cisco ios_xe 16.12.1 Yes
Hardware cisco catalyst_9300-24p-a - No
Hardware cisco catalyst_9300-24p-e - No
Hardware cisco catalyst_9300-24s-a - No
Hardware cisco catalyst_9300-24s-e - No
Hardware cisco catalyst_9300-24t-a - No
Hardware cisco catalyst_9300-24t-e - No
Hardware cisco catalyst_9300-24u-a - No
Hardware cisco catalyst_9300-24u-e - No
Hardware cisco catalyst_9300-24ux-a - No
Hardware cisco catalyst_9300-24ux-e - No
Hardware cisco catalyst_9300-48p-a - No
Hardware cisco catalyst_9300-48p-e - No
Hardware cisco catalyst_9300-48s-a - No
Hardware cisco catalyst_9300-48s-e - No
Hardware cisco catalyst_9300-48t-a - No
Hardware cisco catalyst_9300-48t-e - No
Hardware cisco catalyst_9300-48u-a - No
Hardware cisco catalyst_9300-48u-e - No
Hardware cisco catalyst_9300-48un-a - No
Hardware cisco catalyst_9300-48un-e - No
Hardware cisco catalyst_9300-48uxm-a - No
Hardware cisco catalyst_9300-48uxm-e - No
Hardware cisco catalyst_9300l-24p-4g-a - No
Hardware cisco catalyst_9300l-24p-4g-e - No
Hardware cisco catalyst_9300l-24p-4x-a - No
Hardware cisco catalyst_9300l-24p-4x-e - No
Hardware cisco catalyst_9300l-24t-4g-a - No
Hardware cisco catalyst_9300l-24t-4g-e - No
Hardware cisco catalyst_9300l-24t-4x-a - No
Hardware cisco catalyst_9300l-24t-4x-e - No
Hardware cisco catalyst_9300l-48p-4g-a - No
Hardware cisco catalyst_9300l-48p-4g-e - No
Hardware cisco catalyst_9300l-48p-4x-a - No
Hardware cisco catalyst_9300l-48p-4x-e - No
Hardware cisco catalyst_9300l-48t-4g-a - No
Hardware cisco catalyst_9300l-48t-4g-e - No
Hardware cisco catalyst_9300l-48t-4x-a - No
Hardware cisco catalyst_9300l-48t-4x-e - No
Hardware cisco catalyst_9300l_stack - No
Hardware cisco catalyst_c9500-12q-a - No
Hardware cisco catalyst_c9500-12q-e - No
Hardware cisco catalyst_c9500-16x-a - No
Hardware cisco catalyst_c9500-16x-e - No
Hardware cisco catalyst_c9500-24q-a - No
Hardware cisco catalyst_c9500-24q-e - No
Hardware cisco catalyst_c9500-40x-a - No
Hardware cisco catalyst_c9500-40x-e - No
Hardware cisco cbr-8_converged_broadband_router - No
References