Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-12669

Опубликовано: 25 сент. 2019
Источник: nvd
CVSS3: 6.8
CVSS3: 7.5
CVSS2: 7.8
EPSS Низкий

Описание

A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Software, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of a malformed packet. An attacker could exploit this vulnerability by sending a malformed packet to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:cisco:ios:15.2\(3\)e:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.2\(3\)e5:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:16.11.1:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:cisco:catalyst_3560:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560-x:-:*:*:*:*:*:*:*

EPSS

Процентиль: 64%
0.00459
Низкий

6.8 Medium

CVSS3

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20
NVD-CWE-noinfo

Связанные уязвимости

github
больше 3 лет назад

A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Software, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of a malformed packet. An attacker could exploit this vulnerability by sending a malformed packet to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.

CVSS3: 6.8
fstec
больше 6 лет назад

Уязвимость функции RADIUS Change of Authorization (CoA) системы управления безопасностью сети Cisco TrustSec операционной системы Cisco IOS XE, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 64%
0.00459
Низкий

6.8 Medium

CVSS3

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20
NVD-CWE-noinfo