Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-1957

Опубликовано: 08 авг. 2019
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
CVSS2: 7.8
EPSS Низкий

Описание

A vulnerability in the web interface of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security (TLS) renegotiation requests. An attacker could exploit this vulnerability by sending renegotiation requests at a high rate. A successful exploit could increase the resource usage on the system, eventually leading to a DoS condition.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cisco:iot_field_network_director:*:*:*:*:*:*:*:*
Версия до 4.4.2-11 (исключая)

EPSS

Процентиль: 66%
0.00517
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-399
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

A vulnerability in the web interface of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security (TLS) renegotiation requests. An attacker could exploit this vulnerability by sending renegotiation requests at a high rate. A successful exploit could increase the resource usage on the system, eventually leading to a DoS condition.

CVSS3: 5.3
fstec
больше 6 лет назад

Уязвимость веб-интерфейса программного средства управления сетью IoT Field Network Director, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 66%
0.00517
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-399
NVD-CWE-noinfo