Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-1762

A vulnerability in the Secure Storage feature of Cisco IOS and IOS XE Software could allow an authenticated, local attacker to access sensitive system information on an affected device. The vulnerability is due to improper memory operations performed at encryption time, when affected software handles configuration updates. An attacker could exploit this vulnerability by retrieving the contents of specific memory locations of an affected device. A successful exploit could result in the disclosure of keying materials that are part of the device configuration, which can be used to recover critical system information.

Published

2019-03-28T01:29:00.610

Last Modified

2024-11-21T04:37:19.220

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 4.4 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-200
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios 12.2\(6\)i1 Yes
Operating System cisco ios 15.1\(2\)sg8a Yes
Operating System cisco ios 15.1\(3\)svg3d Yes
Operating System cisco ios 15.1\(3\)svi1b Yes
Operating System cisco ios 15.1\(3\)svm3 Yes
Operating System cisco ios 15.1\(3\)svn2 Yes
Operating System cisco ios 15.1\(3\)svo1 Yes
Operating System cisco ios 15.1\(3\)svo2 Yes
Operating System cisco ios 15.1\(3\)svp1 Yes
Operating System cisco ios 15.1\(4\)m12c Yes
Operating System cisco ios 15.2\(3\)ea1 Yes
Operating System cisco ios 15.2\(4\)jn1 Yes
Operating System cisco ios 15.2\(4a\)ea5 Yes
Operating System cisco ios 15.3\(3\)ja1n Yes
Operating System cisco ios 15.3\(3\)jf35 Yes
Operating System cisco ios 15.3\(3\)ji2 Yes
Operating System cisco ios 15.3\(3\)jn1 Yes
Operating System cisco ios 15.3\(3\)jn2 Yes
Operating System cisco ios 15.6\(2\)sp3b Yes
Operating System cisco ios 15.6\(3\)m1 Yes
Operating System cisco ios 15.6\(3\)m1a Yes
Operating System cisco ios 15.6\(3\)m1b Yes
Operating System cisco ios 15.6\(3\)m2 Yes
Operating System cisco ios 15.6\(3\)m2a Yes
Operating System cisco ios 15.6\(3\)m3 Yes
Operating System cisco ios 15.6\(3\)m3a Yes
Operating System cisco ios 15.6\(3\)m4 Yes
Operating System cisco ios 15.6\(3.1\)m Yes
Operating System cisco ios 15.7\(3\)m Yes
Operating System cisco ios 15.7\(3\)m0a Yes
Operating System cisco ios 15.7\(3\)m1 Yes
Operating System cisco ios_xe 16.6.1 Yes
Operating System cisco ios_xe 16.6.2 Yes
Operating System cisco ios_xe 16.6.3 Yes
Operating System cisco ios_xe 16.6.4 Yes
Operating System cisco ios_xe 16.6.4a Yes
Operating System cisco ios_xe 16.6.4s Yes
Operating System cisco ios_xe 16.7.1 Yes
Operating System cisco ios_xe 16.7.1a Yes
Operating System cisco ios_xe 16.7.1b Yes
Operating System cisco ios_xe 16.7.2 Yes
Operating System cisco ios_xe 16.7.3 Yes
Operating System cisco ios_xe 16.7.4 Yes
Operating System cisco ios_xe 16.8.1 Yes
Operating System cisco ios_xe 16.8.1a Yes
Operating System cisco ios_xe 16.8.1b Yes
Operating System cisco ios_xe 16.8.1c Yes
Operating System cisco ios_xe 16.8.1d Yes
Operating System cisco ios_xe 16.8.1e Yes
Operating System cisco ios_xe 16.8.1s Yes
Operating System cisco ios_xe 16.8.2 Yes
Operating System cisco ios_xe 16.9.1 Yes
Operating System cisco ios_xe 16.9.1a Yes
Operating System cisco ios_xe 16.9.1b Yes
Operating System cisco ios_xe 16.9.1c Yes
Operating System cisco ios_xe 16.9.1d Yes
Operating System cisco ios_xe 16.9.1s Yes
Operating System cisco ios_xe 16.9.2 Yes
Operating System cisco ios_xe 16.9.2a Yes
References