Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2019-1746 Details
Description
A vulnerability in the Cluster Management Protocol (CMP) processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation when processing CMP management packets. An attacker could exploit this vulnerability by sending malicious CMP management packets to an affected device. A successful exploit could cause the switch to crash, resulting in a DoS condition. The switch will reload automatically.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 21, 2024Exploitation: NoneAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-cmp-dos | CVE | PatchVendor Advisory |
| http://www.securityfocus.com/bid/107612 | CVE | Third Party AdvisoryVDB Entry |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-cmp-dos | [email protected] | PatchVendor Advisory |
| http://www.securityfocus.com/bid/107612 | [email protected] | Third Party AdvisoryVDB Entry |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
| CWE-20 | Improper Input Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| cisco ios | 12.1(6)ea1 12.1(6)ea1a 12.1(6)ea2 12.1(6)ea2a 12.1(6)ea2b 12.1(6)ea2c 12.1(8)ea1b 12.1(8)ea1c 12.1(9)ea1 12.1(9)ea1a 12.1(9)ea1c 12.1(9)ea1d 12.1(9)ex 12.1(11)ea1 12.1(11)ea1a 12.1(12c)ea1 12.1(12c)ea1a 12.1(13)ea1 12.1(13)ea1a 12.1(13)ea1b 12.1(13)ea1c 12.1(14)az 12.1(14)ea1 12.1(14)ea1a 12.1(14)ea1b 12.1(19)ea1 12.1(19)ea1a 12.1(19)ea1b 12.1(19)ea1c 12.1(19)ea1d 12.1(20)ea1 12.1(20)ea1a 12.1(20)ea1b 12.1(20)ea2 12.1(22)ea1 12.1(22)ea1a 12.1(22)ea1b 12.1(22)ea2 12.1(22)ea3 12.1(22)ea4 12.1(22)ea4a 12.1(22)ea5 12.1(22)ea5a 12.1(22)ea6 12.1(22)ea6a 12.1(22)ea7 12.1(22)ea8 12.1(22)ea8a 12.1(22)ea9 12.1(22)ea10 12.1(22)ea10a 12.1(22)ea10b 12.1(22)ea11 12.1(22)ea12 12.1(22)ea13 12.1(22)ea14 12.2(6)i1 12.2(14)sz 12.2(14)sz1 12.2(14)sz2 12.2(14)sz3 12.2(14)sz4 12.2(14)sz5 12.2(14)sz6 12.2(18)s 12.2(18)s1 12.2(18)s2 12.2(18)s3 12.2(18)s4 12.2(18)se 12.2(18)se1 12.2(20)eu 12.2(20)eu1 12.2(20)eu2 12.2(20)ewa 12.2(20)ewa1 12.2(20)ewa2 12.2(20)ewa3 12.2(20)ewa4 12.2(20)ex 12.2(20)s 12.2(20)s1 12.2(20)s2 12.2(20)s2a 12.2(20)s3 12.2(20)s4 12.2(20)s4a 12.2(20)s5 12.2(20)s6 12.2(20)se 12.2(20)se1 12.2(20)se2 12.2(20)se3 12.2(20)se4 12.2(22)s 12.2(25)ew 12.2(25)ewa 12.2(25)ewa1 12.2(25)ewa2 12.2(25)ewa3 12.2(25)ewa4 12.2(25)ewa5 12.2(25)ewa6 12.2(25)ewa7 12.2(25)ewa8 12.2(25)ewa9 12.2(25)ewa10 12.2(25)ewa11 12.2(25)ewa12 12.2(25)ewa13 12.2(25)ewa14 12.2(25)ey 12.2(25)ey1 12.2(25)ey2 12.2(25)ey3 12.2(25)ey4 12.2(25)ez 12.2(25)ez1 12.2(25)fx 12.2(25)fy 12.2(25)fz 12.2(25)s 12.2(25)s1 12.2(25)s2 12.2(25)se 12.2(25)se2 12.2(25)se3 12.2(25)sea 12.2(25)seb 12.2(25)seb1 12.2(25)seb2 12.2(25)seb3 12.2(25)seb4 12.2(25)sec 12.2(25)sec1 12.2(25)sec2 12.2(25)sed 12.2(25)sed1 12.2(25)see 12.2(25)see1 12.2(25)see2 12.2(25)see3 12.2(25)see4 12.2(25)sef 12.2(25)sef1 12.2(25)sef2 12.2(25)sef3 12.2(25)seg 12.2(25)seg1 12.2(25)seg3 12.2(25)sg 12.2(25)sg1 12.2(25)sg2 12.2(25)sg3 12.2(25)sg4 12.2(27)sbk9 12.2(31)sg 12.2(31)sg1 12.2(31)sg2 12.2(31)sg3 12.2(31)sga 12.2(31)sga1 12.2(31)sga2 12.2(31)sga3 12.2(31)sga4 12.2(31)sga5 12.2(31)sga6 12.2(31)sga7 12.2(31)sga8 12.2(31)sga9 12.2(31)sga10 12.2(31)sga11 12.2(35)se 12.2(35)se1 12.2(35)se2 12.2(35)se3 12.2(35)se5 12.2(37)ey 12.2(37)se 12.2(37)se1 12.2(37)sg 12.2(37)sg1 12.2(40)ex 12.2(40)ex1 12.2(40)ex2 12.2(40)ex3 12.2(40)se 12.2(40)se1 12.2(40)se2 12.2(40)sg 12.2(40)xo 12.2(44)ex 12.2(44)ex1 12.2(44)se 12.2(44)se1 12.2(44)se2 12.2(44)se3 12.2(44)se4 12.2(44)se5 12.2(44)se6 12.2(44)sg 12.2(44)sg1 12.2(44)sq 12.2(44)sq2 12.2(46)ex 12.2(46)ey 12.2(46)se 12.2(46)se1 12.2(46)se2 12.2(46)sg 12.2(46)sg1 12.2(50)se 12.2(50)se1 12.2(50)se2 12.2(50)se3 12.2(50)se4 12.2(50)se5 12.2(50)sg 12.2(50)sg1 12.2(50)sg2 12.2(50)sg3 12.2(50)sg4 12.2(50)sg5 12.2(50)sg6 12.2(50)sg7 12.2(50)sg8 12.2(50)sq 12.2(50)sq1 12.2(50)sq2 12.2(50)sq3 12.2(50)sq4 12.2(50)sq5 12.2(50)sq6 12.2(50)sq7 12.2(52)ex 12.2(52)ex1 12.2(52)se 12.2(52)se1 12.2(52)sg 12.2(52)xo 12.2(53)ey 12.2(53)ez 12.2(53)se 12.2(53)se1 12.2(53)se2 12.2(53)sg1 12.2(53)sg2 12.2(53)sg3 12.2(53)sg4 12.2(53)sg5 12.2(53)sg6 12.2(53)sg7 12.2(53)sg8 12.2(53)sg9 12.2(53)sg10 12.2(53)sg11 12.2(54)se 12.2(54)sg 12.2(54)sg1 12.2(54)wo 12.2(54)xo 12.2(55)ex 12.2(55)ex1 12.2(55)ex2 12.2(55)ex3 12.2(55)ey 12.2(55)ez 12.2(55)se 12.2(55)se1 12.2(55)se2 12.2(55)se3 12.2(55)se4 12.2(55)se5 12.2(55)se6 12.2(55)se7 12.2(55)se8 12.2(55)se9 12.2(55)se10 12.2(55)se11 12.2(55)se12 12.2(55)se13 12.2(58)ex 12.2(58)ez 12.2(58)se 12.2(58)se1 12.2(58)se2 12.2(60)ez4 12.2(60)ez5 12.4(25e)jaz1 15.0(1)ey 15.0(1)ey1 15.0(1)ey2 15.0(1)se 15.0(1)se1 15.0(1)se2 15.0(1)se3 15.0(1)xo 15.0(1)xo1 15.0(2)ej 15.0(2)ej1 15.0(2)ex 15.0(2)ex1 15.0(2)ex2 15.0(2)ex3 15.0(2)ex4 15.0(2)ex5 15.0(2)ex6 15.0(2)ex7 15.0(2)ex8 15.0(2)ex10 15.0(2)ex11 15.0(2)ex12 15.0(2)ex13 15.0(2)ey 15.0(2)ey1 15.0(2)ey2 15.0(2)ey3 15.0(2)ez 15.0(2)se 15.0(2)se1 15.0(2)se2 15.0(2)se3 15.0(2)se4 15.0(2)se5 15.0(2)se6 15.0(2)se7 15.0(2)se8 15.0(2)se9 15.0(2)se10 15.0(2)se10a 15.0(2)se11 15.0(2)se12 15.0(2)se13 15.0(2)sg 15.0(2)sg1 15.0(2)sg2 15.0(2)sg3 15.0(2)sg4 15.0(2)sg5 15.0(2)sg6 15.0(2)sg7 15.0(2)sg8 15.0(2)sg9 15.0(2)sg10 15.0(2)sg11 15.0(2)sqd 15.0(2)sqd1 15.0(2)sqd2 15.0(2)sqd3 15.0(2)sqd4 15.0(2)sqd5 15.0(2)sqd6 15.0(2)sqd7 15.0(2)sqd8 15.0(2)xo 15.0(2a)ex5 15.0(2a)se9 15.1(1)sg 15.1(1)sg1 15.1(1)sg2 15.1(2)sg 15.1(2)sg1 15.1(2)sg2 15.1(2)sg3 15.1(2)sg4 15.1(2)sg5 15.1(2)sg6 15.1(2)sg7 15.1(2)sg8 15.1(2)sg8a 15.1(2)sy15 15.1(3)mra3 15.1(3)svk4b 15.1(3)svk4c 15.1(3)svo2 15.1(3)svp1 15.2(1)e 15.2(1)e1 15.2(1)e2 15.2(1)e3 15.2(1)ey 15.2(2)e 15.2(2)e1 15.2(2)e2 15.2(2)e3 15.2(2)e4 15.2(2)e5 15.2(2)e5a 15.2(2)e5b 15.2(2)e6 15.2(2)e7 15.2(2)e7b 15.2(2)e8 15.2(2)e9 15.2(2)e9a 15.2(2)e10 15.2(2)ea 15.2(2)ea1 15.2(2)ea2 15.2(2)ea3 15.2(2)eb 15.2(2)eb1 15.2(2)eb2 15.2(2)sc1 15.2(2)sc3 15.2(2)sc4 15.2(2a)e1 15.2(2a)e2 15.2(2b)e 15.2(3)e 15.2(3)e1 15.2(3)e2 15.2(3)e3 15.2(3)e4 15.2(3)e5 15.2(3)ea 15.2(3)ea1 15.2(3a)e 15.2(3m)e2 15.2(3m)e7 15.2(3m)e8 15.2(4)e 15.2(4)e1 15.2(4)e2 15.2(4)e3 15.2(4)e4 15.2(4)e5 15.2(4)e5a 15.2(4)e6 15.2(4)e7 15.2(4)ea 15.2(4)ea1 15.2(4)ea2 15.2(4)ea3 15.2(4)ea4 15.2(4)ea5 15.2(4)ea6 15.2(4)ea7 15.2(4)ea8 15.2(4)ea9 15.2(4)ec1 15.2(4)ec2 15.2(4)jaz1 15.2(4)jn1 15.2(4a)ea5 15.2(4m)e1 15.2(4m)e2 15.2(4m)e3 15.2(4n)e2 15.2(4o)e2 15.2(4o)e3 15.2(4p)e1 15.2(4q)e1 15.2(4s)e1 15.2(4s)e2 15.2(5)e 15.2(5)e1 15.2(5)e2 15.2(5)e2b 15.2(5)e2c 15.2(5)ea 15.2(5)ex 15.2(5a)e 15.2(5a)e1 15.2(5b)e 15.2(5c)e 15.2(6)e 15.2(6)e0a 15.2(6)e0c 15.2(6)e1 15.2(6)e1a 15.2(6)e1s 15.5(1)sy4 15.5(3)s10 |
CPE
Remediation
| |
| cisco ios xe | 3.2.0sg 3.2.1sg 3.2.2sg 3.2.3sg 3.2.4sg 3.2.5sg 3.2.6sg 3.2.7sg 3.2.8sg 3.2.9sg 3.2.10sg 3.2.11sg 3.3.0sg 3.3.0sq 3.3.0xo 3.3.1sg 3.3.1sq 3.3.1xo 3.3.2sg 3.3.2xo 3.4.0sg 3.4.0sq 3.4.1sg 3.4.1sq 3.4.2sg 3.4.3sg 3.4.4sg 3.4.5sg 3.4.6sg 3.4.7sg 3.4.8sg 3.5.0e 3.5.0sq 3.5.1e 3.5.1sq 3.5.2e 3.5.2sq 3.5.3e 3.5.3sq 3.5.4sq 3.5.5sq 3.5.6sq 3.5.7sq 3.5.8sq 3.6.0ae 3.6.0be 3.6.0e 3.6.1e 3.6.2ae 3.6.2e 3.6.3e 3.6.4e 3.6.5ae 3.6.5be 3.6.5e 3.6.6e 3.6.7ae 3.6.7be 3.6.7e 3.6.8e 3.6.9e 3.6.10e 3.7.0e 3.7.1e 3.7.2e 3.7.3e 3.7.4e 3.7.5e 3.8.0e 3.8.1e 3.8.2e 3.8.3e 3.8.4e 3.8.5ae 3.8.5e 3.8.6e 3.8.7e 3.9.0e 3.9.1e 3.9.2be 3.9.2e 3.10.0ce 3.10.0e 3.10.1ae 3.10.1e 3.10.1se 3.10.4s 3.12.0as 3.16.0bs 3.16.1s 3.16.10s 16.9.2h 16.12.1 |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Oct 9, 2019 | CVE Modified | [email protected] |
| Apr 2, 2019 | Initial Analysis | [email protected] |
| Mar 29, 2019 | CVE Modified | [email protected] |