Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-12655

Опубликовано: 25 сент. 2019
Источник: nvd
CVSS3: 8.6
CVSS3: 7.5
CVSS2: 7.8
EPSS Низкий

Описание

A vulnerability in the FTP application layer gateway (ALG) functionality used by Network Address Translation (NAT), NAT IPv6 to IPv4 (NAT64), and the Zone-Based Policy Firewall (ZBFW) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a buffer overflow that occurs when an affected device inspects certain FTP traffic. An attacker could exploit this vulnerability by performing a specific FTP transfer through the device. A successful exploit could allow the attacker to cause the device to reload.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
Версия от 3.16.8s (включая) до 16.3.8 (исключая)
cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
Версия от 16.10.1 (включая) до 16.11.1 (исключая)
cpe:2.3:o:cisco:ios:16.6.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:16.6.5:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:16.9.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:16.9.2:*:*:*:*:*:*:*

EPSS

Процентиль: 79%
0.01251
Низкий

8.6 High

CVSS3

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20
CWE-120

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

A vulnerability in the FTP application layer gateway (ALG) functionality used by Network Address Translation (NAT), NAT IPv6 to IPv4 (NAT64), and the Zone-Based Policy Firewall (ZBFW) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a buffer overflow that occurs when an affected device inspects certain FTP traffic. An attacker could exploit this vulnerability by performing a specific FTP transfer through the device. A successful exploit could allow the attacker to cause the device to reload.

CVSS3: 8.6
fstec
больше 6 лет назад

Уязвимость шлюза прикладного уровня (ALG) и межсетевого экрана ZBFW операционной системы Cisco IOS XE, позволяющая нарушителю вызвать перезагрузку уязвимого устройства

EPSS

Процентиль: 79%
0.01251
Низкий

8.6 High

CVSS3

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20
CWE-120