4.3

CVE-2019-1758

Cisco IOS Software Catalyst 6500 Series 802.1x Authentication Bypass Vulnerability

A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could exploit this vulnerability by attempting to connect to the network on an 802.1x configured port. A successful exploit could allow the attacker to intermittently obtain access to the network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Version 12.2(33)sxj6
Cisco ≫ Ios Version 12.2(33)sxj7
Cisco ≫ Ios Version 12.2(33)sxj8
Cisco ≫ Ios Version 12.2(33)sxj9
Cisco ≫ Ios Version 12.2(33)sxj10
Cisco ≫ Ios Version 12.2(60)ez12
Cisco ≫ Ios Version 15.1(1)sy1
Cisco ≫ Ios Version 15.1(1)sy2
Cisco ≫ Ios Version 15.1(1)sy3
Cisco ≫ Ios Version 15.1(1)sy4
Cisco ≫ Ios Version 15.1(1)sy5
Cisco ≫ Ios Version 15.1(1)sy6
Cisco ≫ Ios Version 15.1(2)sg8a
Cisco ≫ Ios Version 15.1(2)sy
Cisco ≫ Ios Version 15.1(2)sy1
Cisco ≫ Ios Version 15.1(2)sy2
Cisco ≫ Ios Version 15.1(2)sy3
Cisco ≫ Ios Version 15.1(2)sy4
Cisco ≫ Ios Version 15.1(2)sy4a
Cisco ≫ Ios Version 15.1(2)sy5
Cisco ≫ Ios Version 15.1(2)sy6
Cisco ≫ Ios Version 15.1(2)sy7
Cisco ≫ Ios Version 15.1(2)sy8
Cisco ≫ Ios Version 15.1(2)sy9
Cisco ≫ Ios Version 15.1(2)sy10
Cisco ≫ Ios Version 15.1(2)sy11
Cisco ≫ Ios Version 15.1(2)sy12
Cisco ≫ Ios Version 15.1(2)sy13
Cisco ≫ Ios Version 15.1(3)svg3d
Cisco ≫ Ios Version 15.1(3)svi1b
Cisco ≫ Ios Version 15.1(3)svk4b
Cisco ≫ Ios Version 15.1(3)svk4c
Cisco ≫ Ios Version 15.1(3)svm3
Cisco ≫ Ios Version 15.1(3)svn2
Cisco ≫ Ios Version 15.1(3)svo1
Cisco ≫ Ios Version 15.1(3)svo2
Cisco ≫ Ios Version 15.1(3)svp1
Cisco ≫ Ios Version 15.1(3)svp2
Cisco ≫ Ios Version 15.1(4)m12c
Cisco ≫ Ios Version 15.2(1)sy
Cisco ≫ Ios Version 15.2(1)sy0a
Cisco ≫ Ios Version 15.2(1)sy1
Cisco ≫ Ios Version 15.2(1)sy1a
Cisco ≫ Ios Version 15.2(1)sy2
Cisco ≫ Ios Version 15.2(1)sy3
Cisco ≫ Ios Version 15.2(1)sy4
Cisco ≫ Ios Version 15.2(1)sy5
Cisco ≫ Ios Version 15.2(1)sy6
Cisco ≫ Ios Version 15.2(1)sy7
Cisco ≫ Ios Version 15.2(2)sy
Cisco ≫ Ios Version 15.2(2)sy1
Cisco ≫ Ios Version 15.2(2)sy2
Cisco ≫ Ios Version 15.2(2)sy3
Cisco ≫ Ios Version 15.2(3)ea1
Cisco ≫ Ios Version 15.2(4)jn1
Cisco ≫ Ios Version 15.2(4a)ea5
Cisco ≫ Ios Version 15.3(0)sy
Cisco ≫ Ios Version 15.3(1)sy
Cisco ≫ Ios Version 15.3(1)sy1
Cisco ≫ Ios Version 15.3(1)sy2
Cisco ≫ Ios Version 15.3(3)ja1n
Cisco ≫ Ios Version 15.3(3)jf35
Cisco ≫ Ios Version 15.3(3)ji2
Cisco ≫ Ios Version 15.4(1)sy
Cisco ≫ Ios Version 15.4(1)sy1
Cisco ≫ Ios Version 15.4(1)sy2
Cisco ≫ Ios Version 15.4(1)sy3
Cisco ≫ Ios Version 15.4(1)sy4
Cisco ≫ Ios Version 15.5(1)sy
Cisco ≫ Ios Version 15.5(1)sy1
Cisco ≫ Ios Version 15.5(1)sy2
Cisco ≫ Ios Version 15.6(2)sp3b
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.59% 0.436
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 2.8 1.4
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
NIST 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:N/I:P/A:N
Cisco PSIRT 4.7 2.8 1.4
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securityfocus.com/bid/107616
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-c6500
Patch
Vendor Advisory