Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2019-1748 Details
Description
A vulnerability in the Cisco Network Plug-and-Play (PnP) agent of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability exists because the affected software insufficiently validates certificates. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt and modify confidential information on user connections to the affected software.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-pnp-cert | CVE | PatchVendor Advisory |
| http://www.securityfocus.com/bid/107619 | CVE | Third Party AdvisoryVDB Entry |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-pnp-cert | [email protected] | PatchVendor Advisory |
| http://www.securityfocus.com/bid/107619 | [email protected] | Third Party AdvisoryVDB Entry |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-295 | Improper Certificate Validation | [email protected] |
| CWE-295 | Improper Certificate Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| cisco ios | 12.0(1) 12.0(1)t 12.0(1)t1 12.0(1)xe 12.0(1a) 12.0(2) 12.0(2)s 12.0(2)t 12.0(2)t1 12.0(2)xe 12.0(2)xe1 12.0(2)xe3 12.0(2)xe4 12.0(2a) 12.0(2a)t1 12.0(2b) 12.0(3) 12.0(3)s 12.0(3)t 12.0(3)t2 12.0(3)t3 12.0(3a) 12.0(3b) 12.0(3c) 12.0(3d) 12.0(4) 12.0(4)s 12.0(4)t 12.0(4)xe 12.0(4)xe2 12.0(4a) 12.0(4b) 12.0(5) 12.0(5)s 12.0(5)t 12.0(5)t1 12.0(5)xe 12.0(5)xe1 12.0(5)xe2 12.0(5)xe3 12.0(5)xe4 12.0(5)xe5 12.0(5)xe8 12.0(5)xt1 12.0(5a) 12.0(6) 12.0(6)s 12.0(6)s1 12.0(6)s2 12.0(6a) 12.0(6b) 12.0(7) 12.0(7)s 12.0(7)s1 12.0(7)t 12.0(7)t1 12.0(7)t2 12.0(7)t3 12.0(7)xk 12.0(7)xk1 12.0(7a) 12.0(8) 12.0(8)s 12.0(8)s1 12.0(8a) 12.0(8b) 12.0(9) 12.0(9)s 12.0(9)s8 12.0(9)st 12.0(9a) 12.0(10) 12.0(10)s 12.0(10)s1 12.0(10)s2 12.0(10)s3 12.0(10)s3b 12.0(10)s4 12.0(10)s5 12.0(10)s6 12.0(10)s7 12.0(10)s8 12.0(10)st 12.0(10)st1 12.0(10)st2 12.0(10a) 12.0(11) 12.0(11)s 12.0(11)s1 12.0(11)s2 12.0(11)s3 12.0(11)s4 12.0(11)s5 12.0(11)s6 12.0(11)st 12.0(11)st1 12.0(11)st2 12.0(11)st3 12.0(11)st4 12.0(11a) 12.0(12) 12.0(12a) 12.0(13) 12.0(13a) 12.0(14) 12.0(14a) 12.0(15) 12.0(15a) 12.0(15b) 12.0(16) 12.0(16a) 12.0(16b) 12.0(17) 12.0(17a) 12.0(18) 12.0(18b) 12.0(19) 12.0(19a) 12.0(19b) 12.0(20) 12.0(20a) 12.0(21) 12.0(21a) 12.0(22) 12.0(23) 12.0(24) 12.0(25) 12.0(26) 12.0(27) 12.0(28) 12.0(28)s4a 12.0(28a) 12.0(28b) 12.0(28c) 12.0(28d) 12.0(31)sz2 12.1(1) 12.1(1)t 12.1(1c) 12.1(2) 12.1(2)t 12.1(2b) 12.1(3) 12.1(3)t 12.1(3)xi 12.1(3b) 12.1(4) 12.1(4a) 12.1(4b) 12.1(4c) 12.1(5) 12.1(5)t 12.1(5)t4 12.1(5)t5 12.1(5)t7 12.1(5)t8 12.1(5)t8c 12.1(5)t9 12.1(5)t10 12.1(5)t12 12.1(5)t13 12.1(5)t15 12.1(5)t17 12.1(5)t18 12.1(5)t19 12.1(5)yb 12.1(5)yb2 12.1(5a)e5 12.1(5a)e6 12.1(5b) 12.1(5c) 12.1(5c)e11 12.1(5c)ex 12.1(5c)ex1 12.1(5e) 12.1(6) 12.1(6)e 12.1(6)e8 12.1(6)e12 12.1(6)ea1a 12.1(6)ea2 12.1(6)ea2a 12.1(6)ea2b 12.1(6)ea2c 12.1(6)ex 12.1(6a) 12.1(6b) 12.1(7) 12.1(7a)e5 12.1(7b) 12.1(7c) 12.1(8) 12.1(8)ea1b 12.1(8a) 12.1(8a)e 12.1(8b)e9 12.1(8b)e12 12.1(8b)e13 12.1(8b)e15 12.1(8b)e19 12.1(8b)e20 12.1(8b)ex4 12.1(8c) 12.1(9) 12.1(9)ea1a 12.1(9)ea1c 12.1(9)ea1d 12.1(9)ex 12.1(9a) 12.1(10) 12.1(10a) 12.1(11) 12.1(11b) 12.1(12) 12.1(12a) 12.1(12b) 12.1(13) 12.1(13a) 12.1(14) 12.1(15) 12.1(16) 12.1(17) 12.1(17a) 12.1(18) 12.1(19) 12.1(19)ea1b 12.1(19)ea1c 12.1(20) 12.1(20)ea1 12.1(20)ea1a 12.1(20)ea1b 12.1(20)ea2 12.1(20a) 12.1(21) 12.1(22) 12.1(22)ea1a 12.1(22)ea4 12.1(22)ea4a 12.1(22)ea6 12.1(22a) 12.1(22b) 12.1(22c) 12.1(24) 12.1(25) 12.1(26) 12.2(1) 12.2(1a) 12.2(1b) 12.2(1d) 12.2(2)xb9 12.2(3) 12.2(3d) 12.2(3g) 12.2(4)xl2 12.2(5) 12.2(5a) 12.2(5d) 12.2(6) 12.2(6a) 12.2(6b) 12.2(6c) 12.2(6d) 12.2(6e) 12.2(6f) 12.2(6g) 12.2(6h) 12.2(6i) 12.2(6j) 12.2(7) 12.2(7a) 12.2(7b) 12.2(7c) 12.2(7g) 12.2(8)zb 12.2(9)yo 12.2(9)yo1 12.2(9)yo2 12.2(9)yo3 12.2(9)yo4 12.2(10) 12.2(10a) 12.2(10b) 12.2(10d) 12.2(10g) 12.2(11)yz 12.2(11)yz1 12.2(11)yz2 12.2(11)yz3 12.2(12) 12.2(12a) 12.2(12b) 12.2(12b)m1 12.2(12c) 12.2(12d) 12.2(12e) 12.2(12f) 12.2(12g) 12.2(12h) 12.2(12h)m1 12.2(12i) 12.2(12j) 12.2(12k) 12.2(12l) 12.2(12m) 12.2(13) 12.2(13a) 12.2(13b) 12.2(13b)m1 12.2(13b)m2 12.2(13c) 12.2(13e) 12.2(14)sz 12.2(14)sz1 12.2(14)sz2 12.2(14)sz3 12.2(14)sz4 12.2(14)sz5 12.2(14)sz6 12.2(16) 12.2(16a) 12.2(16b) 12.2(16c) 12.2(16f) 12.2(17) 12.2(17a) 12.2(17b) 12.2(17d) 12.2(17e) 12.2(17f) 12.2(18)s 12.2(18)s1 12.2(18)s2 12.2(18)s3 12.2(18)s4 12.2(19) 12.2(19a) 12.2(19b) 12.2(19c) 12.2(20)s 12.2(20)s1 12.2(20)s2 12.2(20)s2a 12.2(20)s3 12.2(20)s4 12.2(20)s4a 12.2(20)s5 12.2(20)s6 12.2(21) 12.2(21a) 12.2(21b) 12.2(22)s 12.2(23) 12.2(23a) 12.2(23c) 12.2(23d) 12.2(23e) 12.2(23f) 12.2(24) 12.2(24a) 12.2(24b) 12.2(25)s 12.2(25)s1 12.2(25)s2 12.2(25)se 12.2(26) 12.2(26a) 12.2(26b) 12.2(27) 12.2(27)sbk9 12.2(27a) 12.2(27b) 12.2(28) 12.2(28a) 12.2(28b) 12.2(28c) 12.2(28d) 12.2(29) 12.2(29a) 12.2(31) 12.2(32) 12.2(37) 12.2(40) 12.2(40a) 12.2(46) 12.3(2)ja3 12.3(2)ja4 12.3(7)jx9 12.3(7)xi3a 12.3(8)jk 12.3(9)m0 12.3(9)m1 12.3(11)ja2 12.3(11)jx 12.3(11)jx1 12.3(11)yf2 12.4(11)md2 12.4(23c)jy 15.0(1)ey 15.0(1)ey2 15.0(2)ex2 15.0(2)ex8 15.0(2)se13 15.0(2)sqd8 15.0(2)sqd9 15.1(2)sg8a 15.1(3)mra3 15.1(3)svg3d 15.1(3)svi1b 15.1(3)svk4b 15.1(3)svk4c 15.1(3)svo1 15.1(3)svo2 15.1(3)svp1 15.2(1)e 15.2(1)e1 15.2(1)e2 15.2(1)e3 15.2(1)ey 15.2(1)sy 15.2(1)sy0a 15.2(1)sy1 15.2(1)sy1a 15.2(1)sy2 15.2(1)sy3 15.2(1)sy4 15.2(1)sy5 15.2(1)sy6 15.2(1)sy7 15.2(2)e 15.2(2)e1 15.2(2)e2 15.2(2)e3 15.2(2)e4 15.2(2)e5 15.2(2)e5a 15.2(2)e5b 15.2(2)e6 15.2(2)e7 15.2(2)e7b 15.2(2)e8 15.2(2)e9 15.2(2)e9a 15.2(2)e10 15.2(2)ea 15.2(2)ea1 15.2(2)ea2 15.2(2)ea3 15.2(2)eb 15.2(2)eb1 15.2(2)eb2 15.2(2)sc1 15.2(2)sc3 15.2(2)sc4 15.2(2)sy 15.2(2)sy1 15.2(2)sy2 15.2(2)sy3 15.2(2a)e1 15.2(2a)e2 15.2(2b)e 15.2(3)e 15.2(3)e1 15.2(3)e2 15.2(3)e3 15.2(3)e4 15.2(3)e5 15.2(3)ea 15.2(3)ea1 15.2(3a)e 15.2(3m)e2 15.2(3m)e7 15.2(3m)e8 15.2(4)e 15.2(4)e1 15.2(4)e2 15.2(4)e3 15.2(4)e4 15.2(4)e5 15.2(4)e5a 15.2(4)e6 15.2(4)ea 15.2(4)ea1 15.2(4)ea2 15.2(4)ea3 15.2(4)ea4 15.2(4)ea5 15.2(4)ea6 15.2(4)ea7 15.2(4)ec1 15.2(4)ec2 15.2(4)jaz1 15.2(4a)ea5 15.2(4m)e1 15.2(4m)e2 15.2(4m)e3 15.2(4n)e2 15.2(4o)e2 15.2(4o)e3 15.2(4p)e1 15.2(4q)e1 15.2(4s)e1 15.2(4s)e2 15.2(5)e 15.2(5)e1 15.2(5)e2 15.2(5)e2b 15.2(5)e2c 15.2(5)ea 15.2(5)ex 15.2(5a)e 15.2(5a)e1 15.2(5b)e 15.2(5c)e 15.2(6)e 15.2(6)e0a 15.2(6)e0b 15.2(6)e0c 15.3(0)sy 15.3(1)sy 15.3(1)sy1 15.3(1)sy2 15.3(1)sy3 15.3(2)s 15.3(2)s1 15.3(2)s2 15.3(3)jaa1 15.3(3)jc 15.3(3)jc1 15.3(3)jc2 15.3(3)jc3 15.3(3)jc4 15.3(3)jc5 15.3(3)jc6 15.3(3)jc8 15.3(3)jc9 15.3(3)jc14 15.3(3)jd 15.3(3)jd2 15.3(3)jd3 15.3(3)jd4 15.3(3)jd5 15.3(3)jd6 15.3(3)jd7 15.3(3)jd8 15.3(3)jd9 15.3(3)jd11 15.3(3)jd12 15.3(3)jd13 15.3(3)jd14 15.3(3)jd15 15.3(3)jd16 15.3(3)je 15.3(3)jf 15.3(3)jf1 15.3(3)jf2 15.3(3)jf4 15.3(3)jf5 15.3(3)jf6 15.3(3)jf7 15.3(3)jf8 15.3(3)jf9 15.3(3)jf35 15.3(3)jg 15.3(3)jg1 15.3(3)jh 15.3(3)jh1 15.3(3)ji 15.3(3)ji1 15.3(3)ji2 15.3(3)s 15.3(3)s1 15.3(3)s1a 15.3(3)s2 15.3(3)s2a 15.3(3)s3 15.3(3)s4 15.3(3)s5 15.3(3)s6 15.3(3)s6a 15.3(3)s7 15.3(3)s8 15.3(3)s8a 15.3(3)s9 15.3(3)s10 15.4(1)cg 15.4(1)cg1 15.4(1)s 15.4(1)s1 15.4(1)s2 15.4(1)s3 15.4(1)s4 15.4(1)sy 15.4(1)sy1 15.4(1)sy2 15.4(1)sy3 15.4(1)t 15.4(1)t1 15.4(1)t2 15.4(1)t3 15.4(1)t4 15.4(2)cg 15.4(2)s 15.4(2)s1 15.4(2)s2 15.4(2)s3 15.4(2)s4 15.4(2)sn 15.4(2)sn1 15.4(2)t 15.4(2)t1 15.4(2)t2 15.4(2)t3 15.4(2)t4 15.4(3)m 15.4(3)m1 15.4(3)m2 15.4(3)m3 15.4(3)m4 15.4(3)m5 15.4(3)m6 15.4(3)m6a 15.4(3)m7 15.4(3)m7a 15.4(3)m8 15.4(3)m9 15.4(3)m10 15.4(3)s 15.4(3)s0d 15.4(3)s0e 15.4(3)s0f 15.4(3)s1 15.4(3)s2 15.4(3)s3 15.4(3)s4 15.4(3)s5 15.4(3)s6 15.4(3)s6a 15.4(3)s7 15.4(3)s8 15.4(3)s9 15.4(3)sn1 15.4(3)sn1a 15.5(1)s 15.5(1)s1 15.5(1)s2 15.5(1)s3 15.5(1)s4 15.5(1)sn 15.5(1)sn1 15.5(1)sy 15.5(1)t 15.5(1)t1 15.5(1)t2 15.5(1)t3 15.5(1)t4 15.5(2)s 15.5(2)s1 15.5(2)s2 15.5(2)s3 15.5(2)s4 15.5(2)sn 15.5(2)t 15.5(2)t1 15.5(2)t2 15.5(2)t3 15.5(2)t4 15.5(2)xb 15.5(3)m 15.5(3)m0a 15.5(3)m1 15.5(3)m2 15.5(3)m2a 15.5(3)m3 15.5(3)m4 15.5(3)m4a 15.5(3)m4b 15.5(3)m4c 15.5(3)m5 15.5(3)m5a 15.5(3)m6 15.5(3)m6a 15.5(3)m7 15.5(3)s 15.5(3)s0a 15.5(3)s1 15.5(3)s1a 15.5(3)s2 15.5(3)s3 15.5(3)s4 15.5(3)s5 15.5(3)s6 15.5(3)s6a 15.5(3)s6b 15.5(3)s7 15.5(3)s7a 15.5(3)s7b 15.5(3)sn 15.5(3)sn0a 15.6(1)s 15.6(1)s1 15.6(1)s2 15.6(1)s3 15.6(1)s4 15.6(1)sn 15.6(1)sn1 15.6(1)sn2 15.6(1)sn3 15.6(1)t 15.6(1)t0a 15.6(1)t1 15.6(1)t2 15.6(1)t3 15.6(2)s 15.6(2)s0a 15.6(2)s1 15.6(2)s2 15.6(2)s3 15.6(2)s4 15.6(2)sn 15.6(2)sp 15.6(2)sp1 15.6(2)sp2 15.6(2)sp3 15.6(2)sp3b 15.6(2)sp4 15.6(2)sp5 15.6(2)t 15.6(2)t0a 15.6(2)t1 15.6(2)t2 15.6(2)t3 15.6(3)m 15.6(3)m0a 15.6(3)m1 15.6(3)m1a 15.6(3)m1b 15.6(3)m2 15.6(3)m2a 15.6(3)m3 15.6(3)m3a 15.6(3)m4 15.6(3)sn 15.6(4)sn 15.6(5)sn 15.6(6)sn 15.6(7)sn 15.7(3)m 15.7(3)m0a 15.7(3)m1 |
CPE
Remediation
| |
| cisco ios xe | 3.3.0se 3.3.0xo 3.3.1se 3.3.1xo 3.3.2se 3.3.2xo 3.3.3se 3.3.4se 3.3.5se 3.5.0e 3.5.1e 3.5.2e 3.5.3e 3.6.0ae 3.6.0be 3.6.0e 3.6.1e 3.6.2ae 3.6.2e 3.6.3e 3.6.4e 3.6.5ae 3.6.5be 3.6.5e 3.6.6e 3.6.7ae 3.6.7be 3.6.7e 3.6.9ae 3.6.9e 3.6.10e 3.7.0e 3.7.1e 3.7.2e 3.7.3e 3.7.4e 3.7.5e 3.7.7s 3.8.0e 3.8.1e 3.8.2e 3.8.3e 3.8.4e 3.8.5ae 3.8.5e 3.8.6e 3.9.0as 3.9.0e 3.9.0s 3.9.1as 3.9.1e 3.9.1s 3.9.2be 3.9.2e 3.9.2s 3.10.0ce 3.10.0e 3.10.0s 3.10.1s 3.10.2as 3.10.2s 3.10.2ts 3.10.3s 3.10.4s 3.10.5s 3.10.6s 3.10.7s 3.10.8as 3.10.8s 3.10.9s 3.10.10s 3.11.0s 3.11.1s 3.11.2s 3.11.3s 3.11.4s 3.12.0as 3.12.0s 3.12.1s 3.12.2s 3.12.3s 3.12.4s 3.13.0as 3.13.0s 3.13.1s 3.13.2as 3.13.2s 3.13.3s 3.13.4s 3.13.5as 3.13.5s 3.13.6as 3.13.6bs 3.13.6s 3.13.7as 3.13.7s 3.13.8s 3.13.9s 3.14.0s 3.14.1s 3.14.2s 3.14.3s 3.14.4s 3.15.0s 3.15.1cs 3.15.1s 3.15.2s 3.15.3s 3.15.4s 3.16.0as 3.16.0bs 3.16.0cs 3.16.0s 3.16.1as 3.16.1s 3.16.2as 3.16.2bs 3.16.2s 3.16.3as 3.16.3s 3.16.4as 3.16.4bs 3.16.4cs 3.16.4ds 3.16.4es 3.16.4gs 3.16.4s 3.16.5as 3.16.5bs 3.16.5s 3.16.6bs 3.16.6s 3.16.7as 3.16.7s 3.17.0s 3.17.1as 3.17.1s 3.17.3s 3.17.4s 3.18.0as 3.18.0s 3.18.0sp 3.18.1asp 3.18.1bsp 3.18.1csp 3.18.1gsp 3.18.1hsp 3.18.1isp 3.18.1s 3.18.1sp 3.18.2asp 3.18.2s 3.18.2sp 3.18.3asp 3.18.3bsp 3.18.3s 3.18.3sp 3.18.4s 3.18.4sp 3.18.5sp 16.1.1 16.1.2 16.1.3 16.2.1 16.2.2 16.3.1 16.3.1a 16.3.2 16.3.3 16.3.4 16.3.5 16.3.5b 16.4.1 16.4.2 16.4.3 16.5.1 16.5.1a 16.5.1b 16.5.2 16.6.1 16.6.2 |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Mar 4, 2024 | Modified Analysis | [email protected] |
| Oct 9, 2019 | CVE Modified | [email protected] |
| Apr 2, 2019 | Initial Analysis | [email protected] |
| Mar 29, 2019 | CVE Modified | [email protected] |