imPC@ndo IT

Tracker / CVE-2019-1963

CVE-2019-1963

High 7.7

A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of Abstract Syntax Notation One (ASN.1)-encoded variables in SNMP packets. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the SNMP daemon on the affected device. A successful exploit could allow the attacker to cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition.

Affected products and versions

cisco fx-os · … → 2.2.2.91
cisco fx-os · 2.3 → 2.3.1.130
cisco fx-os · 2.4 → 2.4.1.222
cisco nx-os · … → 13.2\(7k\)
cisco nx-os · … → 5.2
cisco nx-os · … → 5.2\(1\)sv3\(4.1a\)
cisco nx-os · … → 6.2\(22\)
cisco nx-os · … → 7.1\(5\)n1\(1b\)
cisco nx-os · 14.0 → 14.0\(2c\)
cisco nx-os · 14.1 → 14.1\(1i\)
cisco nx-os · 5.2 → 5.2\(1\)sv5\(1.2\)
cisco nx-os · 5.2 → 6.2\(29\)
cisco nx-os · 7.0\(3\)f → 9.2\(3\)
cisco nx-os · 7.0\(3\)i4 → 7.0\(3\)i4\(9\)
cisco nx-os · 7.0\(3\)i7 → 7.0\(3\)i7\(6\)
cisco nx-os · 7.2 → 7.2\(0\)d1\(1\)
cisco nx-os · 7.3 → 7.3\(5\)n1\(1\)
cisco nx-os · 7.3 → 8.4
cisco nx-os · 8.0 → 8.2\(3\)
cisco nx-os · 8.3 → 8.3\(2\)
cisco nx-os · 9.2 → 9.2\(3\)

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References