8.6

CVE-2019-12657

A vulnerability in Unified Threat Defense (UTD) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper validation of IPv6 packets through the UTD feature. An attacker could exploit this vulnerability by sending IPv6 traffic through an affected device that is configured with UTD. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version16.3.6
   Cisco ≫ 4321 Integrated Services Router Version-
   Cisco ≫ 4331 Integrated Services Router Version-
   Cisco ≫ 4351 Integrated Services Router Version-
   Cisco ≫ 4431 Integrated Services Router Version-
   Cisco ≫ 4451-x Integrated Services Router Version-
   Cisco ≫ Asr 1000 Version-
   Cisco ≫ Asr 1001-hx Version-
   Cisco ≫ Asr 1001-x Version-
   Cisco ≫ Asr 1002-hx Version-
   Cisco ≫ Asr 1002-x Version-
   Cisco ≫ Catalyst 3650-12x48fd-e Version-
   Cisco ≫ Catalyst 3650-12x48fd-l Version-
   Cisco ≫ Catalyst 3650-12x48fd-s Version-
   Cisco ≫ Catalyst 3650-12x48uq-e Version-
   Cisco ≫ Catalyst 3650-12x48uq-l Version-
   Cisco ≫ Catalyst 3650-12x48uq-s Version-
   Cisco ≫ Catalyst 3650-12x48ur-e Version-
   Cisco ≫ Catalyst 3650-12x48ur-l Version-
   Cisco ≫ Catalyst 3650-12x48ur-s Version-
   Cisco ≫ Catalyst 3650-12x48uz-e Version-
   Cisco ≫ Catalyst 3650-12x48uz-l Version-
   Cisco ≫ Catalyst 3650-12x48uz-s Version-
   Cisco ≫ Catalyst 3650-24pd-e Version-
   Cisco ≫ Catalyst 3650-24pd-l Version-
   Cisco ≫ Catalyst 3650-24pd-s Version-
   Cisco ≫ Catalyst 3650-24pdm-e Version-
   Cisco ≫ Catalyst 3650-24pdm-l Version-
   Cisco ≫ Catalyst 3650-24pdm-s Version-
   Cisco ≫ Catalyst 3650-24ps-e Version-
   Cisco ≫ Catalyst 3650-24ps-l Version-
   Cisco ≫ Catalyst 3650-24ps-s Version-
   Cisco ≫ Catalyst 3650-24td-e Version-
   Cisco ≫ Catalyst 3650-24td-l Version-
   Cisco ≫ Catalyst 3650-24td-s Version-
   Cisco ≫ Catalyst 3650-24ts-e Version-
   Cisco ≫ Catalyst 3650-24ts-l Version-
   Cisco ≫ Catalyst 3650-24ts-s Version-
   Cisco ≫ Catalyst 3650-48fd-e Version-
   Cisco ≫ Catalyst 3650-48fd-l Version-
   Cisco ≫ Catalyst 3650-48fd-s Version-
   Cisco ≫ Catalyst 3650-48fq-e Version-
   Cisco ≫ Catalyst 3650-48fq-l Version-
   Cisco ≫ Catalyst 3650-48fq-s Version-
   Cisco ≫ Catalyst 3650-48fqm-e Version-
   Cisco ≫ Catalyst 3650-48fqm-l Version-
   Cisco ≫ Catalyst 3650-48fqm-s Version-
   Cisco ≫ Catalyst 3650-48fs-e Version-
   Cisco ≫ Catalyst 3650-48fs-l Version-
   Cisco ≫ Catalyst 3650-48fs-s Version-
   Cisco ≫ Catalyst 3650-48pd-e Version-
   Cisco ≫ Catalyst 3650-48pd-l Version-
   Cisco ≫ Catalyst 3650-48pd-s Version-
   Cisco ≫ Catalyst 3650-48pq-e Version-
   Cisco ≫ Catalyst 3650-48pq-l Version-
   Cisco ≫ Catalyst 3650-48pq-s Version-
   Cisco ≫ Catalyst 3650-48ps-e Version-
   Cisco ≫ Catalyst 3650-48ps-l Version-
   Cisco ≫ Catalyst 3650-48ps-s Version-
   Cisco ≫ Catalyst 3650-48td-e Version-
   Cisco ≫ Catalyst 3650-48td-l Version-
   Cisco ≫ Catalyst 3650-48td-s Version-
   Cisco ≫ Catalyst 3650-48tq-e Version-
   Cisco ≫ Catalyst 3650-48tq-l Version-
   Cisco ≫ Catalyst 3650-48tq-s Version-
   Cisco ≫ Catalyst 3650-48ts-e Version-
   Cisco ≫ Catalyst 3650-48ts-l Version-
   Cisco ≫ Catalyst 3650-48ts-s Version-
   Cisco ≫ Catalyst 3650-8x24pd-e Version-
   Cisco ≫ Catalyst 3650-8x24pd-l Version-
   Cisco ≫ Catalyst 3650-8x24pd-s Version-
   Cisco ≫ Catalyst 3650-8x24uq-e Version-
   Cisco ≫ Catalyst 3650-8x24uq-l Version-
   Cisco ≫ Catalyst 3650-8x24uq-s Version-
   Cisco ≫ Catalyst 3850-12s-e Version-
   Cisco ≫ Catalyst 3850-12s-s Version-
   Cisco ≫ Catalyst 3850-12xs-e Version-
   Cisco ≫ Catalyst 3850-12xs-s Version-
   Cisco ≫ Catalyst 3850-16xs-e Version-
   Cisco ≫ Catalyst 3850-16xs-s Version-
   Cisco ≫ Catalyst 3850-24p-e Version-
   Cisco ≫ Catalyst 3850-24p-l Version-
   Cisco ≫ Catalyst 3850-24p-s Version-
   Cisco ≫ Catalyst 3850-24s-e Version-
   Cisco ≫ Catalyst 3850-24s-s Version-
   Cisco ≫ Catalyst 3850-24t-e Version-
   Cisco ≫ Catalyst 3850-24t-l Version-
   Cisco ≫ Catalyst 3850-24t-s Version-
   Cisco ≫ Catalyst 3850-24u-e Version-
   Cisco ≫ Catalyst 3850-24u-l Version-
   Cisco ≫ Catalyst 3850-24u-s Version-
   Cisco ≫ Catalyst 3850-24xs-e Version-
   Cisco ≫ Catalyst 3850-24xs-s Version-
   Cisco ≫ Catalyst 3850-24xu-e Version-
   Cisco ≫ Catalyst 3850-24xu-l Version-
   Cisco ≫ Catalyst 3850-24xu-s Version-
   Cisco ≫ Catalyst 3850-32xs-e Version-
   Cisco ≫ Catalyst 3850-32xs-s Version-
   Cisco ≫ Catalyst 3850-48f-e Version-
   Cisco ≫ Catalyst 3850-48f-l Version-
   Cisco ≫ Catalyst 3850-48f-s Version-
   Cisco ≫ Catalyst 3850-48p-e Version-
   Cisco ≫ Catalyst 3850-48p-l Version-
   Cisco ≫ Catalyst 3850-48p-s Version-
   Cisco ≫ Catalyst 3850-48t-e Version-
   Cisco ≫ Catalyst 3850-48t-l Version-
   Cisco ≫ Catalyst 3850-48t-s Version-
   Cisco ≫ Catalyst 3850-48u-e Version-
   Cisco ≫ Catalyst 3850-48u-l Version-
   Cisco ≫ Catalyst 3850-48u-s Version-
   Cisco ≫ Catalyst 3850-48xs-e Version-
   Cisco ≫ Catalyst 3850-48xs-f-e Version-
   Cisco ≫ Catalyst 3850-48xs-f-s Version-
   Cisco ≫ Catalyst 3850-48xs-s Version-
   Cisco ≫ Catalyst C3850-12x48u-e Version-
   Cisco ≫ Catalyst C3850-12x48u-l Version-
   Cisco ≫ Catalyst C3850-12x48u-s Version-
   Cisco ≫ Cloud Services Router 1000v Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.45% 0.802
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
psirt@cisco.com 8.6 3.9 4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.