Vulnerability Details CVE-2019-12669
A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Software, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of a malformed packet. An attacker could exploit this vulnerability by sending a malformed packet to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.0%
CVSS Severity
CVSS v3 Score 6.8
CVSS v2 Score 7.8
References
Products affected by CVE-2019-12669
-
cpe:2.3:h:cisco:catalyst_3560-e:-
-
cpe:2.3:h:cisco:catalyst_3560-x:-
-
cpe:2.3:h:cisco:catalyst_3560:-
-
cpe:2.3:o:cisco:ios:15.2(3)e
-
cpe:2.3:o:cisco:ios:15.2(3)e5
-
cpe:2.3:o:cisco:ios:16.11.1