CVE-2019-12656
A vulnerability in the IOx application environment of multiple Cisco platforms could allow an unauthenticated, remote attacker to cause the IOx web server to stop processing HTTPS requests, resulting in a denial of service (DoS) condition. The vulnerability is due to a Transport Layer Security (TLS) implementation issue. An attacker could exploit this vulnerability by sending crafted TLS packets to the IOx web server on an affected device. A successful exploit could allow the attacker to cause the IOx web server to stop processing HTTPS requests, resulting in a DoS condition.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - psirt@cisco.com
- Published
- 2019-09-25
- Last modified
- 2024-11-19
- Weaknesses
- CWE-20
Affected products
- Cgr 1000 Firmware (Cisco)
- Cisco Industrial Routers Operating System Software (Cisco)
- Ic3000 Firmware (Cisco)
- Ie 4000 Firmware (Cisco)
- Industrial Ethernet 2000 Series Firmware (Cisco)
- Ios (Cisco)
- Ir510 Wpan Firmware (Cisco)
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iox
