Описание
Уязвимость программной платформы IOx операционной системы Cisco IOS связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии и выполнить произвольный код или вызвать отказ в обслуживании
Вендор
Cisco Systems Inc.
Наименование ПО
Cisco IOS
Версия ПО
15.6(1)T0a (Cisco IOS)
15.5(3)M (Cisco IOS)
15.5(1)T (Cisco IOS)
15.5(2)T (Cisco IOS)
15.5(1)T3 (Cisco IOS)
15.5(2)T1 (Cisco IOS)
15.5(2)T2 (Cisco IOS)
15.5(2)T3 (Cisco IOS)
15.5(2)T4 (Cisco IOS)
15.5(1)T4 (Cisco IOS)
15.5(3)M1 (Cisco IOS)
15.5(3)M0a (Cisco IOS)
15.5(3)M2 (Cisco IOS)
15.5(3)M3 (Cisco IOS)
15.5(3)M4 (Cisco IOS)
15.5(3)M4a (Cisco IOS)
15.5(3)M5 (Cisco IOS)
15.5(3)M6 (Cisco IOS)
15.5(3)M6a (Cisco IOS)
15.6(1)T (Cisco IOS)
15.6(2)T (Cisco IOS)
15.6(1)T1 (Cisco IOS)
15.6(2)T1 (Cisco IOS)
15.6(1)T2 (Cisco IOS)
15.6(2)T2 (Cisco IOS)
15.6(1)T3 (Cisco IOS)
15.6(2)T3 (Cisco IOS)
15.6(3)M (Cisco IOS)
15.6(3)M1 (Cisco IOS)
15.6(3)M0a (Cisco IOS)
15.6(3)M1b (Cisco IOS)
15.6(3)M2 (Cisco IOS)
15.6(3)M3 (Cisco IOS)
15.6(3)M3a (Cisco IOS)
15.7(3)M (Cisco IOS)
15.3(3)JAA1 (Cisco IOS)
15.5(1)T2 (Cisco IOS)
15.4(3)M6a (Cisco IOS)
15.4(3)M7 (Cisco IOS)
15.4(3)M6 (Cisco IOS)
15.4(3)M5 (Cisco IOS)
15.4(3)M4 (Cisco IOS)
15.6(3)M6 (Cisco IOS)
15.7(3)M3 (Cisco IOS)
15.8(3)M (Cisco IOS)
15.8(3)M0a (Cisco IOS)
15.5(3)M2a (Cisco IOS)
15.4(3)M (Cisco IOS)
15.4(3)M1 (Cisco IOS)
15.4(3)M2 (Cisco IOS)
15.4(3)M3 (Cisco IOS)
15.4(3)M7a (Cisco IOS)
15.4(3)M8 (Cisco IOS)
15.4(3)M9 (Cisco IOS)
15.4(3)M10 (Cisco IOS)
15.5(3)M7 (Cisco IOS)
15.5(3)M8 (Cisco IOS)
15.6(3)M4 (Cisco IOS)
15.6(3)M5 (Cisco IOS)
15.7(3)M1 (Cisco IOS)
15.7(3)M2 (Cisco IOS)
15.4(1)CG (Cisco IOS)
15.4(2)CG (Cisco IOS)
12.2(60)EZ16 (Cisco IOS)
15.0(2)SG11a (Cisco IOS)
15.5(3)M9 (Cisco IOS)
15.5(3)M10 (Cisco IOS)
15.5(3)M11 (Cisco IOS)
15.6(3)M7 (Cisco IOS)
15.6(3)M6a (Cisco IOS)
15.6(3)M6b (Cisco IOS)
15.6(3)M8 (Cisco IOS)
15.6(3)M9 (Cisco IOS)
15.7(3)M4 (Cisco IOS)
15.7(3)M5 (Cisco IOS)
15.7(3)M4a (Cisco IOS)
15.7(3)M4b (Cisco IOS)
15.7(3)M6 (Cisco IOS)
15.7(3)M7 (Cisco IOS)
15.8(3)M1 (Cisco IOS)
15.8(3)M2 (Cisco IOS)
15.8(3)M3 (Cisco IOS)
15.8(3)M2a (Cisco IOS)
15.8(3)M4 (Cisco IOS)
15.8(3)M3a (Cisco IOS)
15.8(3)M3b (Cisco IOS)
15.8(3)M5 (Cisco IOS)
15.9(3)M (Cisco IOS)
15.9(3)M0a (Cisco IOS)
15.3(3)JPJ (Cisco IOS)
Тип ПО
Операционная система
Операционные системы и аппаратные платформы
Cisco Systems Inc. Cisco IOS 15.6(1)T0a
Cisco Systems Inc. Cisco IOS 15.5(3)M
Cisco Systems Inc. Cisco IOS 15.5(1)T
Cisco Systems Inc. Cisco IOS 15.5(2)T
Cisco Systems Inc. Cisco IOS 15.5(1)T3
Cisco Systems Inc. Cisco IOS 15.5(2)T1
Cisco Systems Inc. Cisco IOS 15.5(2)T2
Cisco Systems Inc. Cisco IOS 15.5(2)T3
Cisco Systems Inc. Cisco IOS 15.5(2)T4
Cisco Systems Inc. Cisco IOS 15.5(1)T4
Cisco Systems Inc. Cisco IOS 15.5(3)M1
Cisco Systems Inc. Cisco IOS 15.5(3)M0a
Cisco Systems Inc. Cisco IOS 15.5(3)M2
Cisco Systems Inc. Cisco IOS 15.5(3)M3
Cisco Systems Inc. Cisco IOS 15.5(3)M4
Cisco Systems Inc. Cisco IOS 15.5(3)M4a
Cisco Systems Inc. Cisco IOS 15.5(3)M5
Cisco Systems Inc. Cisco IOS 15.5(3)M6
Cisco Systems Inc. Cisco IOS 15.5(3)M6a
Cisco Systems Inc. Cisco IOS 15.6(1)T
Cisco Systems Inc. Cisco IOS 15.6(2)T
Cisco Systems Inc. Cisco IOS 15.6(1)T1
Cisco Systems Inc. Cisco IOS 15.6(2)T1
Cisco Systems Inc. Cisco IOS 15.6(1)T2
Cisco Systems Inc. Cisco IOS 15.6(2)T2
Cisco Systems Inc. Cisco IOS 15.6(1)T3
Cisco Systems Inc. Cisco IOS 15.6(2)T3
Cisco Systems Inc. Cisco IOS 15.6(3)M
Cisco Systems Inc. Cisco IOS 15.6(3)M1
Cisco Systems Inc. Cisco IOS 15.6(3)M0a
Cisco Systems Inc. Cisco IOS 15.6(3)M1b
Cisco Systems Inc. Cisco IOS 15.6(3)M2
Cisco Systems Inc. Cisco IOS 15.6(3)M3
Cisco Systems Inc. Cisco IOS 15.6(3)M3a
Cisco Systems Inc. Cisco IOS 15.7(3)M
Cisco Systems Inc. Cisco IOS 15.3(3)JAA1
Cisco Systems Inc. Cisco IOS 15.5(1)T2
Cisco Systems Inc. Cisco IOS 15.4(3)M6a
Cisco Systems Inc. Cisco IOS 15.4(3)M7
Cisco Systems Inc. Cisco IOS 15.4(3)M6
Cisco Systems Inc. Cisco IOS 15.4(3)M5
Cisco Systems Inc. Cisco IOS 15.4(3)M4
Cisco Systems Inc. Cisco IOS 15.6(3)M6
Cisco Systems Inc. Cisco IOS 15.7(3)M3
Cisco Systems Inc. Cisco IOS 15.8(3)M
Cisco Systems Inc. Cisco IOS 15.8(3)M0a
Cisco Systems Inc. Cisco IOS 15.5(3)M2a
Cisco Systems Inc. Cisco IOS 15.4(3)M
Cisco Systems Inc. Cisco IOS 15.4(3)M1
Cisco Systems Inc. Cisco IOS 15.4(3)M2
Cisco Systems Inc. Cisco IOS 15.4(3)M3
Cisco Systems Inc. Cisco IOS 15.4(3)M7a
Cisco Systems Inc. Cisco IOS 15.4(3)M8
Cisco Systems Inc. Cisco IOS 15.4(3)M9
Cisco Systems Inc. Cisco IOS 15.4(3)M10
Cisco Systems Inc. Cisco IOS 15.5(3)M7
Cisco Systems Inc. Cisco IOS 15.5(3)M8
Cisco Systems Inc. Cisco IOS 15.6(3)M4
Cisco Systems Inc. Cisco IOS 15.6(3)M5
Cisco Systems Inc. Cisco IOS 15.7(3)M1
Cisco Systems Inc. Cisco IOS 15.7(3)M2
Cisco Systems Inc. Cisco IOS 15.4(1)CG
Cisco Systems Inc. Cisco IOS 15.4(2)CG
Cisco Systems Inc. Cisco IOS 12.2(60)EZ16
Cisco Systems Inc. Cisco IOS 15.0(2)SG11a
Cisco Systems Inc. Cisco IOS 15.5(3)M9
Cisco Systems Inc. Cisco IOS 15.5(3)M10
Cisco Systems Inc. Cisco IOS 15.5(3)M11
Cisco Systems Inc. Cisco IOS 15.6(3)M7
Cisco Systems Inc. Cisco IOS 15.6(3)M6a
Cisco Systems Inc. Cisco IOS 15.6(3)M6b
Cisco Systems Inc. Cisco IOS 15.6(3)M8
Cisco Systems Inc. Cisco IOS 15.6(3)M9
Cisco Systems Inc. Cisco IOS 15.7(3)M4
Cisco Systems Inc. Cisco IOS 15.7(3)M5
Cisco Systems Inc. Cisco IOS 15.7(3)M4a
Cisco Systems Inc. Cisco IOS 15.7(3)M4b
Cisco Systems Inc. Cisco IOS 15.7(3)M6
Cisco Systems Inc. Cisco IOS 15.7(3)M7
Cisco Systems Inc. Cisco IOS 15.8(3)M1
Cisco Systems Inc. Cisco IOS 15.8(3)M2
Cisco Systems Inc. Cisco IOS 15.8(3)M3
Cisco Systems Inc. Cisco IOS 15.8(3)M2a
Cisco Systems Inc. Cisco IOS 15.8(3)M4
Cisco Systems Inc. Cisco IOS 15.8(3)M3a
Cisco Systems Inc. Cisco IOS 15.8(3)M3b
Cisco Systems Inc. Cisco IOS 15.8(3)M5
Cisco Systems Inc. Cisco IOS 15.9(3)M
Cisco Systems Inc. Cisco IOS 15.9(3)M0a
Cisco Systems Inc. Cisco IOS 15.3(3)JPJ
Уровень опасности уязвимости
Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 8,3)
Высокий уровень опасности (базовая оценка CVSS 3.0 составляет 8,1)
Возможные меры по устранению уязвимости
Использование рекомендаций:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-iot-gos-vuln-s9qS8kYL
Статус уязвимости
Подтверждена производителем
Наличие эксплойта
Данные уточняются
Информация об устранении
Уязвимость устранена
Идентификаторы других систем описаний уязвимостей
- CVE
EPSS
Процентиль: 31%
0.0012
Низкий
8.1 High
CVSS3
8.3 High
CVSS2
Связанные уязвимости
CVSS3: 8.1
nvd
больше 5 лет назад
Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) that are running Cisco IOS Software could allow an attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS3: 8.1
github
больше 3 лет назад
Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) that are running Cisco IOS Software could allow an attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
EPSS
Процентиль: 31%
0.0012
Низкий
8.1 High
CVSS3
8.3 High
CVSS2