CVEvulnerability
CVE-2019-1761
4.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2019-03-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.0 ([email protected])
- 4.3 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:A/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-665
Description
A vulnerability in the Hot Standby Router Protocol (HSRP) subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to receive potentially sensitive information from an affected device. The vulnerability is due to insufficient memory initialization. An attacker could exploit this vulnerability by receiving HSRPv2 traffic from an adjacent HSRP member. A successful exploit could allow the attacker to receive potentially sensitive information from the adjacent device.
Affected configurations
• cisco ios 12.2\(6\)i1
• cisco ios 12.2\(33\)cx
• cisco ios 12.2\(33\)cy
• cisco ios 12.2\(33\)cy1
• cisco ios 12.2\(33\)cy2
• cisco ios 12.2\(33\)ira
• cisco ios 12.2\(33\)irb
• cisco ios 12.2\(33\)irc
• cisco ios 12.2\(33\)ird
• cisco ios 12.2\(33\)ire
• cisco ios 12.2\(33\)ire1
• cisco ios 12.2\(33\)ire2
• cisco ios 12.2\(33\)irf
• cisco ios 12.2\(33\)irg
• cisco ios 12.2\(33\)irg1
• cisco ios 12.2\(33\)irh
• cisco ios 12.2\(33\)irh1
• cisco ios 12.2\(33\)mra
• cisco ios 12.2\(33\)mrb
• cisco ios 12.2\(33\)mrb1
• cisco ios 12.2\(33\)mrb2
• cisco ios 12.2\(33\)mrb3
• cisco ios 12.2\(33\)mrb4
• cisco ios 12.2\(33\)mrb5
• cisco ios 12.2\(33\)mrb6
• cisco ios 12.2\(33\)sb
• cisco ios 12.2\(33\)sb1
• cisco ios 12.2\(33\)sb1a
• cisco ios 12.2\(33\)sb1b
• cisco ios 12.2\(33\)sb2
• cisco ios 12.2\(33\)sb3
• cisco ios 12.2\(33\)sb4
• cisco ios 12.2\(33\)sb5
• cisco ios 12.2\(33\)sb6
• cisco ios 12.2\(33\)sb6a
• cisco ios 12.2\(33\)sb6b
• cisco ios 12.2\(33\)sb7
• cisco ios 12.2\(33\)sb8
• cisco ios 12.2\(33\)sb8a
• cisco ios 12.2\(33\)sb8b
• cisco ios 12.2\(33\)sb8c
• cisco ios 12.2\(33\)sb8d
• cisco ios 12.2\(33\)sb8e
• cisco ios 12.2\(33\)sb8f
• cisco ios 12.2\(33\)sb8g
• cisco ios 12.2\(33\)sb9
• cisco ios 12.2\(33\)sb10
• cisco ios 12.2\(33\)sb11
• cisco ios 12.2\(33\)sb12
• cisco ios 12.2\(33\)sb13
• cisco ios 12.2\(33\)sb14
• cisco ios 12.2\(33\)sb15
• cisco ios 12.2\(33\)sb16
• cisco ios 12.2\(33\)sb17
• cisco ios 12.2\(33\)sca
• cisco ios 12.2\(33\)sca1
• cisco ios 12.2\(33\)sca2
• cisco ios 12.2\(33\)scb
• cisco ios 12.2\(33\)scb1
• cisco ios 12.2\(33\)scb2
… and 1701 more
Related
Weakness · CWE (1)
- CWE-665 Improper Initialization weakness
References
- http://www.securityfocus.com/bid/107620 Broken Link, Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-ios-infoleak Patch, Vendor Advisory
- http://www.securityfocus.com/bid/107620 Broken Link, Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-ios-infoleak Patch, Vendor Advisory