Skip to content
fr Sign in
7.4 High

CVE-2019-1746 A vulnerability in the Cluster Management Protocol (CMP) processing code in Cisco IOS Software and Cisco IOS XE Software…

Description

A vulnerability in the Cluster Management Protocol (CMP) processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation when processing CMP management packets. An attacker could exploit this vulnerability by sending malicious CMP management packets to an affected device. A successful exploit could cause the switch to crash, resulting in a DoS condition. The switch will reload automatically.

Affected products and versions

Product Affected versions Fixed in
Cisco IOS and IOS XE Software 16.12.1 No fix stated
Cisco IOS and IOS XE Software 16.9.2h No fix stated
Cisco IOS and IOS XE Software 3.16 3.16.0bS → 3.16.10S No fix stated
Cisco IOS and IOS XE Software 3.12.0aS No fix stated
Cisco IOS and IOS XE Software 3.10 3.10.0E → 3.10.4S No fix stated
Cisco IOS and IOS XE Software 3.9 3.9.0E → 3.9.2bE No fix stated
Cisco IOS and IOS XE Software 3.8 3.8.0E → 3.8.7E No fix stated
Cisco IOS and IOS XE Software 3.7 3.7.0E → 3.7.5E No fix stated
Cisco IOS and IOS XE Software 3.6 3.6.0E → 3.6.10E No fix stated
Show the 4 other branches
Product Affected versions Fixed in
Cisco IOS and IOS XE Software 3.5 3.5.0E → 3.5.8SQ No fix stated
Cisco IOS and IOS XE Software 3.4 3.4.0SG → 3.4.8SG No fix stated
Cisco IOS and IOS XE Software 3.3 3.3.0SG → 3.3.2SG No fix stated
Cisco IOS and IOS XE Software 3.2 3.2.0SG → 3.2.11SG No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco IOS and IOS XE Software

The 8 CVEs of Cisco IOS and IOS XE Software →
CVE-2019-1762 A vulnerability in the Secure Storage feature of Cisco IOS and IOS XE Software could allow an authenticated, local… 4.4 Medium CVE-2019-1761 A vulnerability in the Hot Standby Router Protocol (HSRP) subsystem of Cisco IOS and IOS XE Software could allow an… 4.3 Medium CVE-2019-1757 A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated,… Not rated CVE-2019-1752 A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,… 8.6 High
Track this CVE