Lucene search

[email protected]NVD:CVE-2019-12656

HistorySep 25, 2019 - 9:15 p.m.

CVE-2019-12656

2019-09-2521:15:10

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

52.6%

JSON

A vulnerability in the IOx application environment of multiple Cisco platforms could allow an unauthenticated, remote attacker to cause the IOx web server to stop processing HTTPS requests, resulting in a denial of service (DoS) condition. The vulnerability is due to a Transport Layer Security (TLS) implementation issue. An attacker could exploit this vulnerability by sending crafted TLS packets to the IOx web server on an affected device. A successful exploit could allow the attacker to cause the IOx web server to stop processing HTTPS requests, resulting in a DoS condition.

Affected configurations

Nvd

Node

ciscoiosMatch1.6.0.0

ciscoiosMatch1.8.0

Node

ciscoindustrial_ethernet_2000_series_firmwareMatch15.2\(6\)e

AND

ciscoie_2000-16ptc-gMatch-

ciscoie_2000-16t67Match-

ciscoie_2000-16t67pMatch-

ciscoie_2000-16tcMatch-

ciscoie_2000-16tc-gMatch-

ciscoie_2000-16tc-g-eMatch-

ciscoie_2000-16tc-g-nMatch-

ciscoie_2000-16tc-g-xMatch-

ciscoie_2000-24t67Match-

ciscoie_2000-4s-ts-gMatch-

ciscoie_2000-4tMatch-

ciscoie_2000-4t-gMatch-

ciscoie_2000-4tsMatch-

ciscoie_2000-4ts-gMatch-

ciscoie_2000-8t67Match-

ciscoie_2000-8t67pMatch-

ciscoie_2000-8tcMatch-

ciscoie_2000-8tc-gMatch-

ciscoie_2000-8tc-g-eMatch-

ciscoie_2000-8tc-g-nMatch-

Node

ciscoic3000_firmwareMatch-

AND

ciscoic3000Match-

Node

ciscoie_4000_firmwareMatch-

AND

ciscoie_4000Match-

Node

ciscocgr_1000_firmwareMatch-

AND

ciscocgr_1000Match-

Node

ciscoir510_wpan_firmwareMatch-

AND

ciscoir510_wpanMatch-

VendorProductVersionCPE
ciscoios1.6.0.0cpe:2.3:o:cisco:ios:1.6.0.0:*:*:*:*:*:*:*
ciscoios1.8.0cpe:2.3:o:cisco:ios:1.8.0:*:*:*:*:*:*:*
ciscoindustrial_ethernet_2000_series_firmware15.2(6)ecpe:2.3:o:cisco:industrial_ethernet_2000_series_firmware:15.2\(6\)e:*:*:*:*:*:*:*
ciscoie_2000-16ptc-g-cpe:2.3:h:cisco:ie_2000-16ptc-g:-:*:*:*:*:*:*:*
ciscoie_2000-16t67-cpe:2.3:h:cisco:ie_2000-16t67:-:*:*:*:*:*:*:*
ciscoie_2000-16t67p-cpe:2.3:h:cisco:ie_2000-16t67p:-:*:*:*:*:*:*:*
ciscoie_2000-16tc-cpe:2.3:h:cisco:ie_2000-16tc:-:*:*:*:*:*:*:*
ciscoie_2000-16tc-g-cpe:2.3:h:cisco:ie_2000-16tc-g:-:*:*:*:*:*:*:*
ciscoie_2000-16tc-g-e-cpe:2.3:h:cisco:ie_2000-16tc-g-e:-:*:*:*:*:*:*:*
ciscoie_2000-16tc-g-n-cpe:2.3:h:cisco:ie_2000-16tc-g-n:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios	1.6.0.0	cpe:2.3:o:cisco:ios:1.6.0.0:::::::*
cisco	ios	1.8.0	cpe:2.3:o:cisco:ios:1.8.0:::::::*
cisco	industrial_ethernet_2000_series_firmware	15.2(6)e	cpe:2.3:o:cisco:industrial_ethernet_2000_series_firmware:15.2\(6\)e:::::::*
cisco	ie_2000-16ptc-g	-	cpe:2.3:h:cisco:ie_2000-16ptc-g:-:::::::*
cisco	ie_2000-16t67	-	cpe:2.3:h:cisco:ie_2000-16t67:-:::::::*
cisco	ie_2000-16t67p	-	cpe:2.3:h:cisco:ie_2000-16t67p:-:::::::*
cisco	ie_2000-16tc	-	cpe:2.3:h:cisco:ie_2000-16tc:-:::::::*
cisco	ie_2000-16tc-g	-	cpe:2.3:h:cisco:ie_2000-16tc-g:-:::::::*
cisco	ie_2000-16tc-g-e	-	cpe:2.3:h:cisco:ie_2000-16tc-g-e:-:::::::*
cisco	ie_2000-16tc-g-n	-	cpe:2.3:h:cisco:ie_2000-16tc-g-n:-:::::::*

Rows per page:

1-10 of 311

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iox

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

52.6%

JSON

Related for NVD:CVE-2019-12656

cisco1 nessus1 cve1 prion1 cvelist1