Skip to content
8.6 High

CVE-2019-1752 A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,…

Description

A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect processing of specific values in the Q.931 information elements. An attacker could exploit this vulnerability by calling the affected device with specific Q.931 information elements being present. An exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device.

Affected products and versions

Product Affected versions Fixed in
Cisco IOS and IOS XE Software 16.8 16.8.1s → 16.8.1 No fix stated
Cisco IOS and IOS XE Software 16.7 16.7.1a → 16.7.3 No fix stated
Cisco IOS and IOS XE Software 16.6 16.6.1 → 16.6.4 No fix stated
Cisco IOS and IOS XE Software 16.5 16.5.1b → 16.5.3 No fix stated
Cisco IOS and IOS XE Software 16.4 16.4.1 → 16.4.3 No fix stated
Cisco IOS and IOS XE Software 16.3 16.3.1a → 16.3.7 No fix stated
Cisco IOS and IOS XE Software 16.2 16.2.1 → 16.2.2 No fix stated
Cisco IOS and IOS XE Software 3.18 3.18.0SP → 3.18.5SP No fix stated
Cisco IOS and IOS XE Software 3.17 3.17.0S → 3.17.4S No fix stated
Show the 9 other branches
Product Affected versions Fixed in
Cisco IOS and IOS XE Software 3.16 3.16.0S → 3.16.8S No fix stated
Cisco IOS and IOS XE Software 3.15 3.15.0S → 3.15.4S No fix stated
Cisco IOS and IOS XE Software 3.14 3.14.0S → 3.14.4S No fix stated
Cisco IOS and IOS XE Software 3.13 3.13.0S → 3.13.10S No fix stated
Cisco IOS and IOS XE Software 3.12 3.12.0S → 3.12.4S No fix stated
Cisco IOS and IOS XE Software 3.11 3.11.0S → 3.11.4S No fix stated
Cisco IOS and IOS XE Software 3.10 3.10.0S → 3.10.10S No fix stated
Cisco IOS and IOS XE Software 3.9 3.9.0S → 3.9.2S No fix stated
Cisco IOS and IOS XE Software 3.8 3.8.0S → 3.8.2S No fix stated

References

Timeline

  1. Published
  2. Last modified
The 8 CVEs of Cisco IOS and IOS XE Software →
Track this CVE