4.7

CVE-2019-1758

A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could exploit this vulnerability by attempting to connect to the network on an 802.1x configured port. A successful exploit could allow the attacker to intermittently obtain access to the network.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Version12.2(33)sxj6
Cisco ≫ Ios Version12.2(33)sxj7
Cisco ≫ Ios Version12.2(33)sxj8
Cisco ≫ Ios Version12.2(33)sxj9
Cisco ≫ Ios Version12.2(33)sxj10
Cisco ≫ Ios Version12.2(60)ez12
Cisco ≫ Ios Version15.1(1)sy1
Cisco ≫ Ios Version15.1(1)sy2
Cisco ≫ Ios Version15.1(1)sy3
Cisco ≫ Ios Version15.1(1)sy4
Cisco ≫ Ios Version15.1(1)sy5
Cisco ≫ Ios Version15.1(1)sy6
Cisco ≫ Ios Version15.1(2)sg8a
Cisco ≫ Ios Version15.1(2)sy
Cisco ≫ Ios Version15.1(2)sy1
Cisco ≫ Ios Version15.1(2)sy2
Cisco ≫ Ios Version15.1(2)sy3
Cisco ≫ Ios Version15.1(2)sy4
Cisco ≫ Ios Version15.1(2)sy4a
Cisco ≫ Ios Version15.1(2)sy5
Cisco ≫ Ios Version15.1(2)sy6
Cisco ≫ Ios Version15.1(2)sy7
Cisco ≫ Ios Version15.1(2)sy8
Cisco ≫ Ios Version15.1(2)sy9
Cisco ≫ Ios Version15.1(2)sy10
Cisco ≫ Ios Version15.1(2)sy11
Cisco ≫ Ios Version15.1(2)sy12
Cisco ≫ Ios Version15.1(2)sy13
Cisco ≫ Ios Version15.1(3)svg3d
Cisco ≫ Ios Version15.1(3)svi1b
Cisco ≫ Ios Version15.1(3)svk4b
Cisco ≫ Ios Version15.1(3)svk4c
Cisco ≫ Ios Version15.1(3)svm3
Cisco ≫ Ios Version15.1(3)svn2
Cisco ≫ Ios Version15.1(3)svo1
Cisco ≫ Ios Version15.1(3)svo2
Cisco ≫ Ios Version15.1(3)svp1
Cisco ≫ Ios Version15.1(3)svp2
Cisco ≫ Ios Version15.1(4)m12c
Cisco ≫ Ios Version15.2(1)sy
Cisco ≫ Ios Version15.2(1)sy0a
Cisco ≫ Ios Version15.2(1)sy1
Cisco ≫ Ios Version15.2(1)sy1a
Cisco ≫ Ios Version15.2(1)sy2
Cisco ≫ Ios Version15.2(1)sy3
Cisco ≫ Ios Version15.2(1)sy4
Cisco ≫ Ios Version15.2(1)sy5
Cisco ≫ Ios Version15.2(1)sy6
Cisco ≫ Ios Version15.2(1)sy7
Cisco ≫ Ios Version15.2(2)sy
Cisco ≫ Ios Version15.2(2)sy1
Cisco ≫ Ios Version15.2(2)sy2
Cisco ≫ Ios Version15.2(2)sy3
Cisco ≫ Ios Version15.2(3)ea1
Cisco ≫ Ios Version15.2(4)jn1
Cisco ≫ Ios Version15.2(4a)ea5
Cisco ≫ Ios Version15.3(0)sy
Cisco ≫ Ios Version15.3(1)sy
Cisco ≫ Ios Version15.3(1)sy1
Cisco ≫ Ios Version15.3(1)sy2
Cisco ≫ Ios Version15.3(3)ja1n
Cisco ≫ Ios Version15.3(3)jf35
Cisco ≫ Ios Version15.3(3)ji2
Cisco ≫ Ios Version15.4(1)sy
Cisco ≫ Ios Version15.4(1)sy1
Cisco ≫ Ios Version15.4(1)sy2
Cisco ≫ Ios Version15.4(1)sy3
Cisco ≫ Ios Version15.4(1)sy4
Cisco ≫ Ios Version15.5(1)sy
Cisco ≫ Ios Version15.5(1)sy1
Cisco ≫ Ios Version15.5(1)sy2
Cisco ≫ Ios Version15.6(2)sp3b
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.446
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 2.8 1.4
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:N/I:P/A:N
psirt@cisco.com 4.7 2.8 1.4
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securityfocus.com/bid/107616
Third Party Advisory
VDB Entry