Lucene search

[email protected]CVE-2019-1963

HistoryAug 28, 2019 - 7:15 p.m.

CVE-2019-1963

2019-08-2819:15:10

CWE-20

[email protected]

web.nvd.nist.gov

cve-2019-1963

snmp

cisco

fxos software

nx-os software

remote attacker

denial of service

vulnerability

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of Abstract Syntax Notation One (ASN.1)-encoded variables in SNMP packets. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the SNMP daemon on the affected device. A successful exploit could allow the attacker to cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition.

Affected configurations

NVD

Node

cisconx-osRange5.2–6.2\(29\)

cisconx-osRange7.3–8.4

AND

ciscomds_9132tMatch-

ciscomds_9148sMatch-

ciscomds_9148tMatch-

ciscomds_9216Match-

ciscomds_9216aMatch-

ciscomds_9216iMatch-

ciscomds_9222iMatch-

ciscomds_9250iMatch-

ciscomds_9396sMatch-

ciscomds_9396tMatch-

ciscomds_9506Match-

ciscomds_9509Match-

ciscomds_9513Match-

ciscomds_9706Match-

ciscomds_9710Match-

ciscomds_9718Match-

Node

cisconx-osRange<13.2\(7k\)

cisconx-osRange14.0–14.0\(2c\)

cisconx-osRange14.1–14.1\(1i\)

AND

cisconexus_92160yc-xMatch-

cisconexus_92300ycMatch-

cisconexus_93108tc-exMatch-

cisconexus_93108tc-fxMatch-

cisconexus_93120txMatch-

cisconexus_9316d-gxMatch-

cisconexus_93180lc-exMatch-

cisconexus_93180yc-exMatch-

cisconexus_93180yc-fxMatch-

cisconexus_93216tc-fx2Match-

cisconexus_93240yc-fx2Match-

cisconexus_9332cMatch-

cisconexus_93360yc-fx2Match-

cisconexus_9336c-fx2Match-

cisconexus_9348gc-fxpMatch-

cisconexus_93600cd-gxMatch-

cisconexus_9364cMatch-

cisconexus_9500_supervisor_aMatch-

cisconexus_9500_supervisor_a\+Match-

cisconexus_9500_supervisor_bMatch-

cisconexus_9500_supervisor_b\+Match-

cisconexus_9504Match-

cisconexus_9508Match-

cisconexus_9516Match-

Node

cisconx-osRange7.0\(3\)f–9.2\(3\)

AND

ciscon9k-c9504-fm-rMatch-

ciscon9k-c9508-fm-rMatch-

ciscon9k-x96136yc-rMatch-

ciscon9k-x9636c-rMatch-

ciscon9k-x9636c-rxMatch-

ciscon9k-x9636q-rMatch-

cisconexus_36180yc-rMatch-

cisconexus_3636c-rMatch-

ciscox96136yc-rMatch-

ciscox9636c-rMatch-

ciscox9636c-rxMatch-

ciscox9636q-rMatch-

Node

cisconx-osRange<7.1\(5\)n1\(1b\)

cisconx-osRange7.3–7.3\(5\)n1\(1\)

AND

cisconexus_5010Match-

cisconexus_5020Match-

cisconexus_5548pMatch-

cisconexus_5548upMatch-

cisconexus_5596tMatch-

cisconexus_5596upMatch-

cisconexus_56128pMatch-

cisconexus_5624qMatch-

cisconexus_5648qMatch-

cisconexus_5672upMatch-

cisconexus_5672up-16gMatch-

cisconexus_5696qMatch-

cisconexus_6001Match-

cisconexus_6004Match-

Node

cisconx-osRange<6.2\(22\)

cisconx-osRange7.2–7.2\(0\)d1\(1\)

cisconx-osRange8.0–8.2\(3\)

cisconx-osRange8.3–8.3\(2\)

AND

cisco7000_10-slotMatch-

cisco7000_18-slotMatch-

cisco7000_4-slotMatch-

cisco7000_9-slotMatch-

cisco7700_10-slotMatch-

cisco7700_18-slotMatch-

cisco7700_2-slotMatch-

cisco7700_6-slotMatch-

ciscon77-f312ck-26Match-

ciscon77-f324fq-25Match-

ciscon77-f348xp-23Match-

ciscon77-f430cq-36Match-

ciscon77-m312cq-26lMatch-

ciscon77-m324fq-25lMatch-

ciscon77-m348xp-23lMatch-

ciscon7k-f248xp-25eMatch-

ciscon7k-f306ck-25Match-

ciscon7k-f312fq-25Match-

ciscon7k-m202cf-22lMatch-

ciscon7k-m206fq-23lMatch-

ciscon7k-m224xp-23lMatch-

ciscon7k-m324fq-25lMatch-

ciscon7k-m348xp-25lMatch-

cisconexus_7000_supervisor_1Match-

cisconexus_7000_supervisor_2Match-

cisconexus_7000_supervisor_2eMatch-

cisconexus_7700_supervisor_2eMatch-

cisconexus_7700_supervisor_3eMatch-

Node

ciscofx-osRange<2.2.2.91

ciscofx-osRange2.3–2.3.1.130

ciscofx-osRange2.4–2.4.1.222

AND

ciscofirepower_4110Match-

ciscofirepower_4120Match-

ciscofirepower_4140Match-

ciscofirepower_4150Match-

ciscofirepower_9300_with_1_sm-24_moduleMatch-

ciscofirepower_9300_with_1_sm-36_moduleMatch-

ciscofirepower_9300_with_1_sm-44_moduleMatch-

ciscofirepower_9300_with_3_sm-44_moduleMatch-

Node

cisconx-osRange<13.2\(7k\)

cisconx-osRange14.0–14.0\(2c\)

cisconx-osRange14.1–14.1\(1i\)

AND

cisco9432pqMatch-

cisco9536pqMatch-

cisco9636pqMatch-

cisco9736pqMatch-

ciscon9k-x9432c-sMatch-

ciscon9k-x9464pxMatch-

ciscon9k-x9464tx2Match-

ciscon9k-x9564pxMatch-

ciscon9k-x9564txMatch-

ciscon9k-x9636c-rMatch-

ciscon9k-x9636c-rxMatch-

ciscon9k-x97160yc-exMatch-

ciscon9k-x9732c-exMatch-

ciscon9k-x9732c-fxMatch-

ciscon9k-x9736c-exMatch-

ciscon9k-x9736c-fxMatch-

ciscon9k-x9788tc-fxMatch-

cisconexus_92160yc-xMatch-

cisconexus_92300ycMatch-

cisconexus_93108tc-exMatch-

cisconexus_93108tc-fxMatch-

cisconexus_93120txMatch-

cisconexus_9316d-gxMatch-

cisconexus_93180lc-exMatch-

cisconexus_93180yc-exMatch-

cisconexus_93180yc-fxMatch-

cisconexus_93216tc-fx2Match-

cisconexus_93240yc-fx2Match-

cisconexus_9332cMatch-

cisconexus_93360yc-fx2Match-

cisconexus_9336c-fx2Match-

cisconexus_9348gc-fxpMatch-

cisconexus_93600cd-gxMatch-

cisconexus_9364cMatch-

cisconexus_9500_supervisor_aMatch-

cisconexus_9500_supervisor_a\+Match-

cisconexus_9500_supervisor_bMatch-

cisconexus_9500_supervisor_b\+Match-

cisconexus_9504Match-

cisconexus_9508Match-

cisconexus_9516Match-

ciscox9636q-rMatch-

Node

cisconx-osRange<5.2\(1\)sv3\(4.1a\)

AND

cisconexus_1000v_switchMatch-vmware_vsphere

Node

cisconx-osRange<5.2

AND

cisconexus_1000v_switchMatch-hyper-v

Node

cisconx-osRange5.2–5.2\(1\)sv5\(1.2\)

AND

cisconexus_1000_virtual_edgeMatch-vmware_vsphere

Node

cisconx-osRange7.0\(3\)i4–7.0\(3\)i4\(9\)

cisconx-osRange7.0\(3\)i7–7.0\(3\)i7\(6\)

cisconx-osRange9.2–9.2\(3\)

AND

ciscon9k-c92160yc-xMatch-

ciscon9k-c9236cMatch-

ciscon9k-c9272qMatch-

ciscon9k-c93180lc-exMatch-

ciscon9k-c93180yc-exMatch-

ciscon9k-c93180yc-fxMatch-

ciscon9k-x9732c-exMatch-

ciscon9k-x9736c-fxMatch-

cisconexus_3048Match-

Node

cisconx-osRange7.0\(3\)i7–7.0\(3\)i7\(6\)

cisconx-osRange9.2–9.2\(3\)

AND

cisconexus_3524-x\/xlMatch-

cisconexus_3548-x\/xlMatch-

CPENameOperatorVersion
cisco:nx-oscisco nx-oslt6.2\(29\)
cisco:nx-oscisco nx-oslt8.4

CPE	Name	Operator	Version
cisco:nx-os	cisco nx-os	lt	6.2\(29\)
cisco:nx-os	cisco nx-os	lt	8.4

CNA Affected

[
  {
    "product": "Cisco Unified Computing System (Managed) ",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "8.4(1)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-fxnxos-snmp-dos

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

Related for CVE-2019-1963

nessus2 cisco1 cvelist1 prion1 nvd1