Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-1749

A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router (ASR) 900 Route Switch Processor 3 (RSP3) could allow an unauthenticated, adjacent attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability exists because the software insufficiently validates ingress traffic on the ASIC used on the RSP3 platform. An attacker could exploit this vulnerability by sending a malformed OSPF version 2 (OSPFv2) message to an affected device. A successful exploit could allow the attacker to cause a reload of the iosd process, triggering a reload of the affected device and resulting in a DoS condition.

Published

2019-03-28T00:29:00.717

Last Modified

2024-11-21T04:37:16.703

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.4 (HIGH)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

6.5

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios_xe 3.13.6as Yes
Operating System cisco ios_xe 3.16.0as Yes
Operating System cisco ios_xe 3.16.1as Yes
Operating System cisco ios_xe 3.16.2as Yes
Operating System cisco ios_xe 3.16.3as Yes
Operating System cisco ios_xe 3.16.4bs Yes
Operating System cisco ios_xe 3.16.4cs Yes
Operating System cisco ios_xe 3.16.4ds Yes
Operating System cisco ios_xe 3.16.4es Yes
Operating System cisco ios_xe 3.16.4gs Yes
Operating System cisco ios_xe 3.16.4s Yes
Operating System cisco ios_xe 3.16.5as Yes
Operating System cisco ios_xe 3.16.5s Yes
Operating System cisco ios_xe 3.16.6bs Yes
Operating System cisco ios_xe 3.16.6s Yes
Operating System cisco ios_xe 3.16.7bs Yes
Operating System cisco ios_xe 3.16.7s Yes
Operating System cisco ios_xe 3.16.8s Yes
Operating System cisco ios_xe 3.17.0s Yes
Operating System cisco ios_xe 3.17.1s Yes
Operating System cisco ios_xe 3.17.3s Yes
Operating System cisco ios_xe 3.17.4s Yes
Operating System cisco ios_xe 3.18.0s Yes
Operating System cisco ios_xe 3.18.0sp Yes
Operating System cisco ios_xe 3.18.1bsp Yes
Operating System cisco ios_xe 3.18.1gsp Yes
Operating System cisco ios_xe 3.18.1hsp Yes
Operating System cisco ios_xe 3.18.1isp Yes
Operating System cisco ios_xe 3.18.1s Yes
Operating System cisco ios_xe 3.18.1sp Yes
Operating System cisco ios_xe 3.18.2s Yes
Operating System cisco ios_xe 3.18.2sp Yes
Operating System cisco ios_xe 3.18.3s Yes
Operating System cisco ios_xe 3.18.3sp Yes
Operating System cisco ios_xe 3.18.4s Yes
Operating System cisco ios_xe 3.18.4sp Yes
Operating System cisco ios_xe 16.5.1 Yes
Operating System cisco ios_xe 16.5.2 Yes
Operating System cisco ios_xe 16.5.3 Yes
Operating System cisco ios_xe 16.6.1 Yes
Operating System cisco ios_xe 16.6.2 Yes
Operating System cisco ios_xe 16.6.3 Yes
Operating System cisco ios_xe 16.6.4 Yes
Operating System cisco ios_xe 16.7.1 Yes
Operating System cisco ios_xe 16.7.2 Yes
Operating System cisco ios_xe 16.8.1 Yes
Operating System cisco ios_xe 16.8.1b Yes
Operating System cisco ios_xe 16.8.1c Yes
References