← Back

CVE-2019-12669

nvd nist
Published: Sep 25, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Software, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of a malformed packet. An attacker could exploit this vulnerability by sending a malformed packet to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.

Affected (3)

Products: Cisco: Ios
Cisco
1 product
Ios
Configuration A
3 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Cisco
Ios
Version 15.2(3)e5
Ios
Version 15.2(3)e
Ios
Version 16.11.1
Running on/withPlatform Versions
Cisco
Catalyst 3560
All versions
Cisco
Catalyst 3560 E
All versions
Cisco
Catalyst 3560 X
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.