CVEvulnerability

CVE-2019-1760

5.9 MEDIUM Published 2019-03-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-03-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.8 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS 3.0 ([email protected])
5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20

Description

A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this vulnerability by sending specially crafted smart probe packets at the affected device. A successful exploit could allow the attacker to reload the device, resulting in a denial of service (DoS) attack on an affected system.

Affected configurations

• cisco ios xe 3.2.0ja • cisco ios xe 3.16.4as • cisco ios xe 3.16.4bs • cisco ios xe 3.16.4cs • cisco ios xe 3.16.4ds • cisco ios xe 3.16.4es • cisco ios xe 3.16.4gs • cisco ios xe 3.16.4s • cisco ios xe 3.16.5as • cisco ios xe 3.16.5bs • cisco ios xe 3.16.5s • cisco ios xe 3.16.6bs • cisco ios xe 3.16.6s • cisco ios xe 3.16.7as • cisco ios xe 3.16.7bs • cisco ios xe 3.16.7s • cisco ios xe 16.3.2 • cisco ios xe 16.3.3 • cisco ios xe 16.3.4 • cisco ios xe 16.3.5 • cisco ios xe 16.3.5b • cisco ios xe 16.3.6 • cisco ios xe 16.4.1 • cisco ios xe 16.4.2 • cisco ios xe 16.4.3 • cisco ios xe 16.5.1 • cisco ios xe 16.5.1a • cisco ios xe 16.5.1b • cisco ios xe 16.5.2 • cisco ios xe 16.5.3 • cisco ios xe 16.6.1 • cisco ios xe 16.6.2 • cisco ios xe 16.6.3 • cisco ios xe 16.7.1 • cisco ios xe 16.7.1a • cisco ios xe 16.7.1b • cisco ios xe 16.8.1 • cisco ios xe 16.8.1a • cisco ios xe 16.8.1b • cisco ios xe 16.8.1c • cisco ios xe 16.8.1s

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References