6.1
CVSSv2

CVE-2019-1750

Published: 28/03/2019 Updated: 09/10/2019
CVSS v2 Base Score: 6.1 | Impact Score: 6.9 | Exploitability Score: 6.5
CVSS v3 Base Score: 7.4 | Impact Score: 4 | Exploitability Score: 2.8
VMScore: 543
Vector: AV:A/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

A vulnerability in the Easy Virtual Switching System (VSS) of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent malicious user to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol (CDP) packets used with the Easy Virtual Switching System. An attacker could exploit this vulnerability by sending a specially crafted CDP packet. An exploit could allow the malicious user to cause the device to reload, resulting in a denial of service (DoS) condition.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios xe 3.6.0be

cisco ios xe 3.10.2e

cisco ios xe 3.6.6e

cisco ios xe 3.6.7be

cisco ios xe 3.8.5e

cisco ios xe 3.9.0e

cisco ios xe 3.6.5ae

cisco ios xe 3.6.4e

cisco ios xe 3.8.2e

cisco ios xe 3.6.9e

cisco ios xe 3.6.0ae

cisco ios xe 3.9.2be

cisco ios xe 3.6.5be

cisco ios xe 3.10.1e

cisco ios xe 3.10.0e

cisco ios xe 3.6.8e

cisco ios xe 3.8.6e

cisco ios xe 3.10.0ce

cisco ios xe 16.9.2h

cisco ios xe 3.6.5e

cisco ios xe 3.8.3e

cisco ios xe 3.9.2e

cisco ios xe 3.6.2e

cisco ios xe 3.8.0e

cisco ios xe 3.7.2e

cisco ios xe 3.6.3e

cisco ios xe 3.6.7ae

cisco ios xe 3.6.1e

cisco ios xe 3.7.0e

cisco ios xe 3.8.5ae

cisco ios xe 3.10.1se

cisco ios xe 3.6.0e

cisco ios xe 3.6.10e

cisco ios xe 3.8.4e

cisco ios xe 3.6.2ae

cisco ios xe 3.6.7e

cisco ios xe 3.7.1e

cisco ios xe 3.8.1e

cisco ios xe 3.10.1ae

cisco ios xe 3.7.3e

cisco ios xe 3.9.1e

cisco ios xe 3.8.7e

Vendor Advisories

A vulnerability in the Easy Virtual Switching System (VSS) of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol (CDP) packets used with the Easy Virtual Switching Sys ...