Lucene search

CiscoCVE-2019-12714

HistoryOct 02, 2019 - 7:15 p.m.

CVE-2019-12714

2019-10-0219:15:14

CWE-770

CWE-400

cisco

web.nvd.nist.gov

vulnerability

web-based management

cisco

ic3000

industrial compute gateway

authenticated

remote attacker

denial of service

dos

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

44.2%

JSON

A vulnerability in the web-based management interface of Cisco IC3000 Industrial Compute Gateway could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software improperly manages system resources. An attacker could exploit this vulnerability by opening a large number of simultaneous sessions on the web-based management interface of an affected device. A successful exploit could allow the attacker to cause a DoS condition of the web-based management interface, preventing normal management operations.

Affected configurations

Nvd

Node

ciscoic3000_industrial_compute_gateway_firmwareRange<1.1.1

AND

ciscoic3000_industrial_compute_gatewayMatch-

VendorProductVersionCPE
ciscoic3000_industrial_compute_gateway_firmware*cpe:2.3:o:cisco:ic3000_industrial_compute_gateway_firmware:*:*:*:*:*:*:*:*
ciscoic3000_industrial_compute_gateway-cpe:2.3:h:cisco:ic3000_industrial_compute_gateway:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ic3000_industrial_compute_gateway_firmware	*	cpe:2.3:o:cisco:ic3000_industrial_compute_gateway_firmware::::::::
cisco	ic3000_industrial_compute_gateway	-	cpe:2.3:h:cisco:ic3000_industrial_compute_gateway:-:::::::*

CNA Affected

[
  {
    "product": "Cisco IC3000 Industrial Compute Gateway",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ic3000-icg-dos

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

44.2%

JSON

Related for CVE-2019-12714