Lucene search
CiscoCISCO-SA-20190925-CTSPAC-DOSHistorySep 25, 2019 - 4:00 p.m.
Cisco IOS XE Software TrustSec Protected Access Credential Provisioning Denial of Service Vulnerability
2019-09-2516:00:00
tools.cisco.com
71
EPSS
0.002
Percentile
52.7%
A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition.
The vulnerability is due to improper validation of attributes in RADIUS messages. An attacker could exploit this vulnerability by sending a malicious RADIUS message to an affected device while the device is in a specific state.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-ctspac-dos [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-ctspac-dos”]
Affected configurations
Node
ciscocisco_ios_xe_softwareMatch16.3
ORciscocisco_ios_xe_softwareMatch16.4
ORciscocisco_ios_xe_softwareMatch16.5
ORciscocisco_ios_xe_softwareMatch3.18sp
ORciscocisco_ios_xe_softwareMatch16.6
ORciscocisco_ios_xe_softwareMatch16.7
ORciscocisco_ios_xe_softwareMatch16.8
ORciscocisco_ios_xe_softwareMatch16.9
ORciscocisco_ios_xe_softwareMatch16.10
ORciscocisco_ios_xe_softwareMatch16.11
ORciscocisco_ios_xe_softwareMatchany
ORciscocisco_ios_xe_softwareMatch16.3.1
ORciscocisco_ios_xe_softwareMatch16.3.2
ORciscocisco_ios_xe_softwareMatch16.3.3
ORciscocisco_ios_xe_softwareMatch16.3.1a
ORciscocisco_ios_xe_softwareMatch16.3.4
ORciscocisco_ios_xe_softwareMatch16.3.5
ORciscocisco_ios_xe_softwareMatch16.3.5b
ORciscocisco_ios_xe_softwareMatch16.3.6
ORciscocisco_ios_xe_softwareMatch16.3.7
ORciscocisco_ios_xe_softwareMatch16.3.8
ORciscocisco_ios_xe_softwareMatch16.4.1
ORciscocisco_ios_xe_softwareMatch16.4.2
ORciscocisco_ios_xe_softwareMatch16.4.3
ORciscocisco_ios_xe_softwareMatch16.5.1
ORciscocisco_ios_xe_softwareMatch16.5.1a
ORciscocisco_ios_xe_softwareMatch16.5.1b
ORciscocisco_ios_xe_softwareMatch16.5.2
ORciscocisco_ios_xe_softwareMatch16.5.3
ORciscocisco_ios_xe_softwareMatch3.18.9sp
ORciscocisco_ios_xe_softwareMatch16.6.1
ORciscocisco_ios_xe_softwareMatch16.6.2
ORciscocisco_ios_xe_softwareMatch16.6.3
ORciscocisco_ios_xe_softwareMatch16.6.4
ORciscocisco_ios_xe_softwareMatch16.6.5
ORciscocisco_ios_xe_softwareMatch16.6.4s
ORciscocisco_ios_xe_softwareMatch16.6.4a
ORciscocisco_ios_xe_softwareMatch16.6.5a
ORciscocisco_ios_xe_softwareMatch16.6.5b
ORciscocisco_ios_xe_softwareMatch16.7.1
ORciscocisco_ios_xe_softwareMatch16.7.1a
ORciscocisco_ios_xe_softwareMatch16.7.1b
ORciscocisco_ios_xe_softwareMatch16.7.2
ORciscocisco_ios_xe_softwareMatch16.7.3
ORciscocisco_ios_xe_softwareMatch16.7.4
ORciscocisco_ios_xe_softwareMatch16.8.1
ORciscocisco_ios_xe_softwareMatch16.8.1a
ORciscocisco_ios_xe_softwareMatch16.8.1b
ORciscocisco_ios_xe_softwareMatch16.8.1s
ORciscocisco_ios_xe_softwareMatch16.8.1c
ORciscocisco_ios_xe_softwareMatch16.8.1d
ORciscocisco_ios_xe_softwareMatch16.8.2
ORciscocisco_ios_xe_softwareMatch16.8.1e
ORciscocisco_ios_xe_softwareMatch16.8.3
ORciscocisco_ios_xe_softwareMatch16.9.1
ORciscocisco_ios_xe_softwareMatch16.9.2
ORciscocisco_ios_xe_softwareMatch16.9.1a
ORciscocisco_ios_xe_softwareMatch16.9.1b
ORciscocisco_ios_xe_softwareMatch16.9.1s
ORciscocisco_ios_xe_softwareMatch16.9.1c
ORciscocisco_ios_xe_softwareMatch16.9.1d
ORciscocisco_ios_xe_softwareMatch16.9.3
ORciscocisco_ios_xe_softwareMatch16.9.2a
ORciscocisco_ios_xe_softwareMatch16.9.2s
ORciscocisco_ios_xe_softwareMatch16.9.3h
ORciscocisco_ios_xe_softwareMatch16.9.3a
ORciscocisco_ios_xe_softwareMatch16.10.1
ORciscocisco_ios_xe_softwareMatch16.10.1a
ORciscocisco_ios_xe_softwareMatch16.10.1b
ORciscocisco_ios_xe_softwareMatch16.10.1s
ORciscocisco_ios_xe_softwareMatch16.10.1c
ORciscocisco_ios_xe_softwareMatch16.10.1e
ORciscocisco_ios_xe_softwareMatch16.10.1d
ORciscocisco_ios_xe_softwareMatch16.10.2
ORciscocisco_ios_xe_softwareMatch16.10.1f
ORciscocisco_ios_xe_softwareMatch16.11.1
ORciscocisco_ios_xe_softwareMatch16.11.1a
ORciscocisco_ios_xe_softwareMatchany
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | cisco_ios_xe_software | 16.3 | cpe:2.3:a:cisco:cisco_ios_xe_software:16.3:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 16.4 | cpe:2.3:a:cisco:cisco_ios_xe_software:16.4:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 16.5 | cpe:2.3:a:cisco:cisco_ios_xe_software:16.5:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 3.18sp | cpe:2.3:a:cisco:cisco_ios_xe_software:3.18sp:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 16.6 | cpe:2.3:a:cisco:cisco_ios_xe_software:16.6:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 16.7 | cpe:2.3:a:cisco:cisco_ios_xe_software:16.7:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 16.8 | cpe:2.3:a:cisco:cisco_ios_xe_software:16.8:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 16.9 | cpe:2.3:a:cisco:cisco_ios_xe_software:16.9:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 16.10 | cpe:2.3:a:cisco:cisco_ios_xe_software:16.10:*:*:*:*:*:*:* |
| cisco | cisco_ios_xe_software | 16.11 | cpe:2.3:a:cisco:cisco_ios_xe_software:16.11:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2019-12663
2019-09-25 21:15:11
cve
cve
CVE-2019-12663
2019-09-25 21:15:11
nessus
nessus
prion
prion
Input validation
2019-09-25 21:15:00
cvelist
cvelist