Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-1962


A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crashes, which can result in a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient validation of TCP packets when processed by the Cisco Fabric Services over IP (CFSoIP) feature. An attacker could exploit this vulnerability by sending a malicious Cisco Fabric Services TCP packet to an affected device. A successful exploit could allow the attacker to cause process crashes, resulting in a device reload and a DoS condition. Note: There are three distribution methods that can be configured for Cisco Fabric Services. This vulnerability affects only distribution method CFSoIP, which is disabled by default. See the Details section for more information.


Published

2019-08-28T19:15:10.867

Last Modified

2024-11-21T04:37:46.613

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 8.6 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-20

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco nx-os < 6.2\(29\) Yes
Operating System cisco nx-os < 8.1 Yes
Hardware cisco mds_9132t - No
Hardware cisco mds_9148s - No
Hardware cisco mds_9148t - No
Hardware cisco mds_9216 - No
Hardware cisco mds_9216a - No
Hardware cisco mds_9216i - No
Hardware cisco mds_9222i - No
Hardware cisco mds_9250i - No
Hardware cisco mds_9396s - No
Hardware cisco mds_9396t - No
Hardware cisco mds_9506 - No
Hardware cisco mds_9509 - No
Hardware cisco mds_9513 - No
Hardware cisco mds_9706 - No
Hardware cisco mds_9710 - No
Hardware cisco mds_9718 - No
Operating System cisco nx-os < 9.2 Yes
Hardware cisco n9k-c9504-fm-r - No
Hardware cisco n9k-c9508-fm-r - No
Hardware cisco n9k-x96136yc-r - No
Hardware cisco n9k-x9636c-r - No
Hardware cisco n9k-x9636c-rx - No
Hardware cisco n9k-x9636q-r - No
Hardware cisco nexus_36180yc-r - No
Hardware cisco nexus_3636c-r - No
Hardware cisco x96136yc-r - No
Hardware cisco x9636c-r - No
Hardware cisco x9636c-rx - No
Hardware cisco x9636q-r - No
Operating System cisco nx-os < 7.1\(5\)n1\(1b\) Yes
Operating System cisco nx-os < 7.3\(5\)n1\(1\) Yes
Hardware cisco nexus_5010 - No
Hardware cisco nexus_5020 - No
Hardware cisco nexus_5548p - No
Hardware cisco nexus_5548up - No
Hardware cisco nexus_5596t - No
Hardware cisco nexus_5596up - No
Hardware cisco nexus_56128p - No
Hardware cisco nexus_5624q - No
Hardware cisco nexus_5648q - No
Hardware cisco nexus_5672up - No
Hardware cisco nexus_5672up-16g - No
Hardware cisco nexus_5696q - No
Hardware cisco nexus_6001 - No
Hardware cisco nexus_6004 - No
Operating System cisco nx-os < 6.2\(22\) Yes
Operating System cisco nx-os < 7.3\(4\)d1\(1\) Yes
Hardware cisco 7000_10-slot - No
Hardware cisco 7000_18-slot - No
Hardware cisco 7000_4-slot - No
Hardware cisco 7000_9-slot - No
Hardware cisco 7700_10-slot - No
Hardware cisco 7700_18-slot - No
Hardware cisco 7700_2-slot - No
Hardware cisco 7700_6-slot - No
Hardware cisco n77-f312ck-26 - No
Hardware cisco n77-f324fq-25 - No
Hardware cisco n77-f348xp-23 - No
Hardware cisco n77-f430cq-36 - No
Hardware cisco n77-m312cq-26l - No
Hardware cisco n77-m324fq-25l - No
Hardware cisco n77-m348xp-23l - No
Hardware cisco n7k-f248xp-25e - No
Hardware cisco n7k-f306ck-25 - No
Hardware cisco n7k-f312fq-25 - No
Hardware cisco n7k-m202cf-22l - No
Hardware cisco n7k-m206fq-23l - No
Hardware cisco n7k-m224xp-23l - No
Hardware cisco n7k-m324fq-25l - No
Hardware cisco n7k-m348xp-25l - No
Hardware cisco nexus_7000_supervisor_1 - No
Hardware cisco nexus_7000_supervisor_2 - No
Hardware cisco nexus_7000_supervisor_2e - No
Hardware cisco nexus_7700_supervisor_2e - No
Hardware cisco nexus_7700_supervisor_3e - No
Operating System cisco nx-os < 7.0\(3\)i4\(9\) Yes
Operating System cisco nx-os < 7.0\(3\)i7\(6\) Yes
Hardware cisco n9k-c92160yc-x - No
Hardware cisco n9k-c9236c - No
Hardware cisco n9k-c9272q - No
Hardware cisco n9k-c93180lc-ex - No
Hardware cisco n9k-c93180yc-ex - No
Hardware cisco n9k-c93180yc-fx - No
Hardware cisco n9k-x9732c-ex - No
Hardware cisco n9k-x9736c-fx - No
Hardware cisco nexus_3048 - No
Operating System cisco nx-os < 6.0\(2\)a8\(11\) Yes
Operating System cisco nx-os < 7.0\(3\)i7\(6\) Yes
Hardware cisco nexus_3524-x\/xl - No
Hardware cisco nexus_3548-x\/xl - No
Operating System cisco nx-os < 3.2\(3i\) Yes
Operating System cisco nx-os < 4.0\(2d\) Yes
Hardware cisco ucs-6296up - No
Hardware cisco ucs_6248up - No
Hardware cisco ucs_6324 - No
Hardware cisco ucs_6332 - No
Hardware cisco ucs_6332-16up - No

References