CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
60.4%
Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
Vendor | Product | Version | CPE |
---|---|---|---|
cisco | ios_xe | - | cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:* |
cisco | 1100_integrated_services_router | - | cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:* |
cisco | 1101_integrated_services_router | - | cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:* |
cisco | 1109_integrated_services_router | - | cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:* |
cisco | 1111x_integrated_services_router | - | cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:* |
cisco | 111x_integrated_services_router | - | cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:* |
cisco | 1120_integrated_services_router | - | cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:* |
cisco | 1160_integrated_services_router | - | cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:* |
cisco | asr_1001-hx | - | cpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:* |
cisco | asr_1001-x | - | cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:* |
[
{
"product": "Cisco IOS XE Software 16.1.1",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
60.4%