CVE-2019-12657

Published: Sep 25, 2019Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability in Unified Threat Defense (UTD) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper validation of IPv6 packets through the UTD feature. An attacker could exploit this vulnerability by sending IPv6 traffic through an affected device that is configured with UTD. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.

Affected (1)

Products: Cisco: Ios Xe

Cisco

1 product

Ios Xe

Configuration A

1 vulnerable · 117 platform

Vulnerable Software	Affected Versions
Cisco Ios Xe	Version 16.3.6

Running on/with	Platform Versions
Cisco 4321 Integrated Services Router	All versions
Cisco 4331 Integrated Services Router	All versions
Cisco 4351 Integrated Services Router	All versions
Cisco 4431 Integrated Services Router	All versions
Cisco 4451 X Integrated Services Router	All versions
Cisco Asr 1000	All versions
Cisco Asr 1001 Hx	All versions
Cisco Asr 1001 X	All versions
Cisco Asr 1002 Hx	All versions
Cisco Asr 1002 X	All versions
Cisco Catalyst 3650 12x48fd E	All versions
Cisco Catalyst 3650 12x48fd L	All versions
Cisco Catalyst 3650 12x48fd S	All versions
Cisco Catalyst 3650 12x48uq E	All versions
Cisco Catalyst 3650 12x48uq L	All versions
Cisco Catalyst 3650 12x48uq S	All versions
Cisco Catalyst 3650 12x48ur E	All versions
Cisco Catalyst 3650 12x48ur L	All versions
Cisco Catalyst 3650 12x48ur S	All versions
Cisco Catalyst 3650 12x48uz E	All versions
Cisco Catalyst 3650 12x48uz L	All versions
Cisco Catalyst 3650 12x48uz S	All versions
Cisco Catalyst 3650 24pd E	All versions
Cisco Catalyst 3650 24pd L	All versions
Cisco Catalyst 3650 24pd S	All versions
Cisco Catalyst 3650 24pdm E	All versions
Cisco Catalyst 3650 24pdm L	All versions
Cisco Catalyst 3650 24pdm S	All versions
Cisco Catalyst 3650 24ps E	All versions
Cisco Catalyst 3650 24ps L	All versions
Cisco Catalyst 3650 24ps S	All versions
Cisco Catalyst 3650 24td E	All versions
Cisco Catalyst 3650 24td L	All versions
Cisco Catalyst 3650 24td S	All versions
Cisco Catalyst 3650 24ts E	All versions
Cisco Catalyst 3650 24ts L	All versions
Cisco Catalyst 3650 24ts S	All versions
Cisco Catalyst 3650 48fd E	All versions
Cisco Catalyst 3650 48fd L	All versions
Cisco Catalyst 3650 48fd S	All versions
Cisco Catalyst 3650 48fq E	All versions
Cisco Catalyst 3650 48fq L	All versions
Cisco Catalyst 3650 48fq S	All versions
Cisco Catalyst 3650 48fqm E	All versions
Cisco Catalyst 3650 48fqm L	All versions
Cisco Catalyst 3650 48fqm S	All versions
Cisco Catalyst 3650 48fs E	All versions
Cisco Catalyst 3650 48fs L	All versions
Cisco Catalyst 3650 48fs S	All versions
Cisco Catalyst 3650 48pd E	All versions
Cisco Catalyst 3650 48pd L	All versions
Cisco Catalyst 3650 48pd S	All versions
Cisco Catalyst 3650 48pq E	All versions
Cisco Catalyst 3650 48pq L	All versions
Cisco Catalyst 3650 48pq S	All versions
Cisco Catalyst 3650 48ps E	All versions
Cisco Catalyst 3650 48ps L	All versions
Cisco Catalyst 3650 48ps S	All versions
Cisco Catalyst 3650 48td E	All versions
Cisco Catalyst 3650 48td L	All versions
Cisco Catalyst 3650 48td S	All versions
Cisco Catalyst 3650 48tq E	All versions
Cisco Catalyst 3650 48tq L	All versions
Cisco Catalyst 3650 48tq S	All versions
Cisco Catalyst 3650 48ts E	All versions
Cisco Catalyst 3650 48ts L	All versions
Cisco Catalyst 3650 48ts S	All versions
Cisco Catalyst 3650 8x24pd E	All versions
Cisco Catalyst 3650 8x24pd L	All versions
Cisco Catalyst 3650 8x24pd S	All versions
Cisco Catalyst 3650 8x24uq E	All versions
Cisco Catalyst 3650 8x24uq L	All versions
Cisco Catalyst 3650 8x24uq S	All versions
Cisco Catalyst 3850 12s E	All versions
Cisco Catalyst 3850 12s S	All versions
Cisco Catalyst 3850 12xs E	All versions
Cisco Catalyst 3850 12xs S	All versions
Cisco Catalyst 3850 16xs E	All versions
Cisco Catalyst 3850 16xs S	All versions
Cisco Catalyst 3850 24p E	All versions
Cisco Catalyst 3850 24p L	All versions
Cisco Catalyst 3850 24p S	All versions
Cisco Catalyst 3850 24s E	All versions
Cisco Catalyst 3850 24s S	All versions
Cisco Catalyst 3850 24t E	All versions
Cisco Catalyst 3850 24t L	All versions
Cisco Catalyst 3850 24t S	All versions
Cisco Catalyst 3850 24u E	All versions
Cisco Catalyst 3850 24u L	All versions
Cisco Catalyst 3850 24u S	All versions
Cisco Catalyst 3850 24xs E	All versions
Cisco Catalyst 3850 24xs S	All versions
Cisco Catalyst 3850 24xu E	All versions
Cisco Catalyst 3850 24xu L	All versions
Cisco Catalyst 3850 24xu S	All versions
Cisco Catalyst 3850 32xs E	All versions
Cisco Catalyst 3850 32xs S	All versions
Cisco Catalyst 3850 48f E	All versions
Cisco Catalyst 3850 48f L	All versions
Cisco Catalyst 3850 48f S	All versions
Cisco Catalyst 3850 48p E	All versions
Cisco Catalyst 3850 48p L	All versions
Cisco Catalyst 3850 48p S	All versions
Cisco Catalyst 3850 48t E	All versions
Cisco Catalyst 3850 48t L	All versions
Cisco Catalyst 3850 48t S	All versions
Cisco Catalyst 3850 48u E	All versions
Cisco Catalyst 3850 48u L	All versions
Cisco Catalyst 3850 48u S	All versions
Cisco Catalyst 3850 48xs E	All versions
Cisco Catalyst 3850 48xs F E	All versions
Cisco Catalyst 3850 48xs F S	All versions
Cisco Catalyst 3850 48xs S	All versions
Cisco Catalyst C3850 12x48u E	All versions
Cisco Catalyst C3850 12x48u L	All versions
Cisco Catalyst C3850 12x48u S	All versions
Cisco Cloud Services Router 1000v	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-utd

Source: psirt@cisco.com

Vendor Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-utd

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.