Lucene search

[email protected]CVE-2019-12656

HistorySep 25, 2019 - 9:15 p.m.

CVE-2019-12656

2019-09-2521:15:10

CWE-20

[email protected]

web.nvd.nist.gov

cisco

iox

vulnerability

dos

tls

security

nvd

cve-2019-12656

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

52.7%

JSON

A vulnerability in the IOx application environment of multiple Cisco platforms could allow an unauthenticated, remote attacker to cause the IOx web server to stop processing HTTPS requests, resulting in a denial of service (DoS) condition. The vulnerability is due to a Transport Layer Security (TLS) implementation issue. An attacker could exploit this vulnerability by sending crafted TLS packets to the IOx web server on an affected device. A successful exploit could allow the attacker to cause the IOx web server to stop processing HTTPS requests, resulting in a DoS condition.

Affected configurations

NVD

Node

ciscoiosMatch1.6.0.0

ciscoiosMatch1.8.0

Node

ciscoindustrial_ethernet_2000_series_firmwareMatch15.2\(6\)e

AND

ciscoie_2000-16ptc-gMatch-

ciscoie_2000-16t67Match-

ciscoie_2000-16t67pMatch-

ciscoie_2000-16tcMatch-

ciscoie_2000-16tc-gMatch-

ciscoie_2000-16tc-g-eMatch-

ciscoie_2000-16tc-g-nMatch-

ciscoie_2000-16tc-g-xMatch-

ciscoie_2000-24t67Match-

ciscoie_2000-4s-ts-gMatch-

ciscoie_2000-4tMatch-

ciscoie_2000-4t-gMatch-

ciscoie_2000-4tsMatch-

ciscoie_2000-4ts-gMatch-

ciscoie_2000-8t67Match-

ciscoie_2000-8t67pMatch-

ciscoie_2000-8tcMatch-

ciscoie_2000-8tc-gMatch-

ciscoie_2000-8tc-g-eMatch-

ciscoie_2000-8tc-g-nMatch-

Node

ciscoic3000_firmwareMatch-

AND

ciscoic3000Match-

Node

ciscoie_4000_firmwareMatch-

AND

ciscoie_4000Match-

Node

ciscocgr_1000_firmwareMatch-

AND

ciscocgr_1000Match-

Node

ciscoir510_wpan_firmwareMatch-

AND

ciscoir510_wpanMatch-

CPENameOperatorVersion
cisco:ioscisco ioseq1.6.0.0
cisco:ioscisco ioseq1.8.0

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	1.6.0.0
cisco:ios	cisco ios	eq	1.8.0

CNA Affected

[
  {
    "product": "Cisco Industrial Routers Operating System Software ",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iox

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

52.7%

JSON

Related for CVE-2019-12656

prion1 nvd1 cisco1 nessus1 cvelist1