Lucene search

[email protected]CVE-2019-1757

HistoryMar 28, 2019 - 1:29 a.m.

CVE-2019-1757

2019-03-2801:29:00

CWE-295

[email protected]

web.nvd.nist.gov

cve-2019-1757

cisco

smart call home

ios

ios xe

vulnerability

certificate validation

man-in-the-middle

nvd

data access

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.7%

JSON

A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software.

Affected configurations

NVD

Node

ciscoiosMatch2.3

ciscoiosMatch12.2\(6\)i1

ciscoiosMatch12.4\(25e\)jap1m

ciscoiosMatch12.4\(25e\)jap2

ciscoiosMatch12.4\(25e\)jap26

ciscoiosMatch12.4\(25e\)jaz1

ciscoiosMatch15.1\(2\)sg8a

ciscoiosMatch15.1\(3\)svg3d

ciscoiosMatch15.1\(3\)svi1b

ciscoiosMatch15.1\(3\)svm3

ciscoiosMatch15.1\(3\)svn2

ciscoiosMatch15.1\(3\)svo1

ciscoiosMatch15.1\(3\)svo2

ciscoiosMatch15.1\(3\)svp1

ciscoiosMatch15.1\(4\)m12c

ciscoiosMatch15.2\(2\)e4

ciscoiosMatch15.2\(2\)e5

ciscoiosMatch15.2\(2\)e5a

ciscoiosMatch15.2\(2\)e5b

ciscoiosMatch15.2\(2\)e6

ciscoiosMatch15.2\(2\)e7

ciscoiosMatch15.2\(2\)e7b

ciscoiosMatch15.2\(2\)e8

ciscoiosMatch15.2\(3\)e4

ciscoiosMatch15.2\(3\)e5

ciscoiosMatch15.2\(3\)ea1

ciscoiosMatch15.2\(4\)e2

ciscoiosMatch15.2\(4\)e3

ciscoiosMatch15.2\(4\)e4

ciscoiosMatch15.2\(4\)e5

ciscoiosMatch15.2\(4\)e5a

ciscoiosMatch15.2\(4\)e6

ciscoiosMatch15.2\(4\)ea8

ciscoiosMatch15.2\(4\)ea9

ciscoiosMatch15.2\(4\)jaz1

ciscoiosMatch15.2\(4\)jn1

ciscoiosMatch15.2\(4a\)ea5

ciscoiosMatch15.2\(4m\)e2

ciscoiosMatch15.2\(4m\)e3

ciscoiosMatch15.2\(4n\)e2

ciscoiosMatch15.2\(4o\)e2

ciscoiosMatch15.2\(4o\)e3

ciscoiosMatch15.2\(4p\)e1

ciscoiosMatch15.2\(4q\)e1

ciscoiosMatch15.2\(4s\)e1

ciscoiosMatch15.2\(4s\)e2

ciscoiosMatch15.2\(5\)e

ciscoiosMatch15.2\(5\)e1

ciscoiosMatch15.2\(5\)e2

ciscoiosMatch15.2\(5\)e2b

ciscoiosMatch15.2\(5\)e2c

ciscoiosMatch15.2\(5\)ea

ciscoiosMatch15.2\(5\)ex

ciscoiosMatch15.2\(5a\)e

ciscoiosMatch15.2\(5a\)e1

ciscoiosMatch15.2\(5b\)e

ciscoiosMatch15.2\(5c\)e

ciscoiosMatch15.2\(6\)e

ciscoiosMatch15.2\(6\)e0a

ciscoiosMatch15.2\(6\)e0c

ciscoiosMatch15.2\(6\)e1

ciscoiosMatch15.2\(6\)e1a

ciscoiosMatch15.2\(6\)e1s

ciscoiosMatch15.3\(3\)ja1n

ciscoiosMatch15.3\(3\)jd15

ciscoiosMatch15.3\(3\)jda15

ciscoiosMatch15.3\(3\)jf35

ciscoiosMatch15.3\(3\)ji

ciscoiosMatch15.3\(3\)ji2

ciscoiosMatch15.3\(3\)jn1

ciscoiosMatch15.3\(3\)jn2

ciscoiosMatch15.5\(3\)s1

ciscoiosMatch15.5\(3\)s1a

ciscoiosMatch15.5\(3\)s2

ciscoiosMatch15.5\(3\)s3

ciscoiosMatch15.5\(3\)s4

ciscoiosMatch15.5\(3\)s5

ciscoiosMatch15.5\(3\)s6

ciscoiosMatch15.5\(3\)s6a

ciscoiosMatch15.5\(3\)s6b

ciscoiosMatch15.5\(3\)s7

ciscoiosMatch15.6\(1\)s

ciscoiosMatch15.6\(1\)s1

ciscoiosMatch15.6\(1\)s2

ciscoiosMatch15.6\(1\)s3

ciscoiosMatch15.6\(1\)s4

ciscoiosMatch15.6\(1\)sn

ciscoiosMatch15.6\(1\)sn1

ciscoiosMatch15.6\(1\)sn2

ciscoiosMatch15.6\(1\)sn3

ciscoiosMatch15.6\(1\)t

ciscoiosMatch15.6\(1\)t0a

ciscoiosMatch15.6\(1\)t1

ciscoiosMatch15.6\(1\)t2

ciscoiosMatch15.6\(1\)t3

ciscoiosMatch15.6\(2\)s

ciscoiosMatch15.6\(2\)s1

ciscoiosMatch15.6\(2\)s2

ciscoiosMatch15.6\(2\)s3

ciscoiosMatch15.6\(2\)s4

ciscoiosMatch15.6\(2\)sn

ciscoiosMatch15.6\(2\)sp

ciscoiosMatch15.6\(2\)sp1

ciscoiosMatch15.6\(2\)sp2

ciscoiosMatch15.6\(2\)sp3

ciscoiosMatch15.6\(2\)sp3b

ciscoiosMatch15.6\(2\)sp4

ciscoiosMatch15.6\(2\)t

ciscoiosMatch15.6\(2\)t0a

ciscoiosMatch15.6\(2\)t1

ciscoiosMatch15.6\(2\)t2

ciscoiosMatch15.6\(2\)t3

ciscoiosMatch15.6\(3\)m

ciscoiosMatch15.6\(3\)m0a

ciscoiosMatch15.6\(3\)m1

ciscoiosMatch15.6\(3\)m1a

ciscoiosMatch15.6\(3\)m1b

ciscoiosMatch15.6\(3\)m2

ciscoiosMatch15.6\(3\)m2a

ciscoiosMatch15.6\(3\)m3

ciscoiosMatch15.6\(3\)m3a

ciscoiosMatch15.6\(3\)m4

ciscoiosMatch15.6\(3\)sn

ciscoiosMatch15.6\(4\)sn

ciscoiosMatch15.6\(5\)sn

ciscoiosMatch15.6\(6\)sn

ciscoiosMatch15.6\(7\)sn

ciscoiosMatch15.7\(3\)m

ciscoiosMatch15.7\(3\)m0a

ciscoiosMatch15.7\(3\)m1

ciscoiosMatch15.7\(3\)m2

ciscoios_xeMatch3.6.4e

ciscoios_xeMatch3.6.5ae

ciscoios_xeMatch3.6.5be

ciscoios_xeMatch3.6.5e

ciscoios_xeMatch3.6.6e

ciscoios_xeMatch3.6.7ae

ciscoios_xeMatch3.6.7be

ciscoios_xeMatch3.6.7e

ciscoios_xeMatch3.6.8e

ciscoios_xeMatch3.7.4e

ciscoios_xeMatch3.7.5e

ciscoios_xeMatch3.8.2e

ciscoios_xeMatch3.8.3e

ciscoios_xeMatch3.8.4e

ciscoios_xeMatch3.8.5ae

ciscoios_xeMatch3.8.5e

ciscoios_xeMatch3.8.6e

ciscoios_xeMatch3.9.0e

ciscoios_xeMatch3.9.1e

ciscoios_xeMatch3.9.2be

ciscoios_xeMatch3.9.2e

ciscoios_xeMatch3.10.0ce

ciscoios_xeMatch3.10.0e

ciscoios_xeMatch3.10.1ae

ciscoios_xeMatch3.10.1e

ciscoios_xeMatch3.10.1se

ciscoios_xeMatch3.16.1as

ciscoios_xeMatch3.16.1s

ciscoios_xeMatch3.16.2as

ciscoios_xeMatch3.16.2bs

ciscoios_xeMatch3.16.2s

ciscoios_xeMatch3.16.3as

ciscoios_xeMatch3.16.3s

ciscoios_xeMatch3.16.4as

ciscoios_xeMatch3.16.4bs

ciscoios_xeMatch3.16.4cs

ciscoios_xeMatch3.16.4ds

ciscoios_xeMatch3.16.4es

ciscoios_xeMatch3.16.4gs

ciscoios_xeMatch3.16.4s

ciscoios_xeMatch3.16.5as

ciscoios_xeMatch3.16.5bs

ciscoios_xeMatch3.16.5s

ciscoios_xeMatch3.16.6bs

ciscoios_xeMatch3.16.6s

ciscoios_xeMatch3.16.7as

ciscoios_xeMatch3.16.7bs

ciscoios_xeMatch3.16.7s

ciscoios_xeMatch3.17.0s

ciscoios_xeMatch3.17.1as

ciscoios_xeMatch3.17.1s

ciscoios_xeMatch3.17.3s

ciscoios_xeMatch3.17.4s

ciscoios_xeMatch3.18.0as

ciscoios_xeMatch3.18.0s

ciscoios_xeMatch3.18.0sp

ciscoios_xeMatch3.18.1asp

ciscoios_xeMatch3.18.1bsp

ciscoios_xeMatch3.18.1csp

ciscoios_xeMatch3.18.1gsp

ciscoios_xeMatch3.18.1hsp

ciscoios_xeMatch3.18.1isp

ciscoios_xeMatch3.18.1s

ciscoios_xeMatch3.18.1sp

ciscoios_xeMatch3.18.2asp

ciscoios_xeMatch3.18.2s

ciscoios_xeMatch3.18.2sp

ciscoios_xeMatch3.18.3asp

ciscoios_xeMatch3.18.3bsp

ciscoios_xeMatch3.18.3s

ciscoios_xeMatch3.18.3sp

ciscoios_xeMatch3.18.4s

ciscoios_xeMatch3.18.4sp

ciscoios_xeMatch16.2.1

ciscoios_xeMatch16.2.2

ciscoios_xeMatch16.3.1

ciscoios_xeMatch16.3.1a

ciscoios_xeMatch16.3.2

ciscoios_xeMatch16.3.3

ciscoios_xeMatch16.3.4

ciscoios_xeMatch16.3.5

ciscoios_xeMatch16.3.5b

ciscoios_xeMatch16.3.6

ciscoios_xeMatch16.4.1

ciscoios_xeMatch16.4.2

ciscoios_xeMatch16.4.3

ciscoios_xeMatch16.5.1

ciscoios_xeMatch16.5.1a

ciscoios_xeMatch16.5.1b

ciscoios_xeMatch16.5.2

ciscoios_xeMatch16.5.3

ciscoios_xeMatch16.6.1

ciscoios_xeMatch16.6.2

ciscoios_xeMatch16.6.3

ciscoios_xeMatch16.7.1

ciscoios_xeMatch16.7.1a

ciscoios_xeMatch16.7.1b

ciscoios_xeMatch16.7.2

ciscoios_xeMatch16.8.1

ciscoios_xeMatch16.8.1a

ciscoios_xeMatch16.8.1b

ciscoios_xeMatch16.8.1c

ciscoios_xeMatch16.8.1d

ciscoios_xeMatch16.8.1s

ciscoios_xeMatch16.8.2

ciscoios_xeMatch16.9.1b

ciscoios_xeMatch16.9.1c

ciscoios_xeMatch16.9.1s

CPENameOperatorVersion
cisco:ioscisco ioseq2.3
cisco:ioscisco ioseq12.2\(6\)i1
cisco:ioscisco ioseq12.4\(25e\)jap1m
cisco:ioscisco ioseq12.4\(25e\)jap2
cisco:ioscisco ioseq12.4\(25e\)jap26
cisco:ioscisco ioseq12.4\(25e\)jaz1
cisco:ioscisco ioseq15.1\(2\)sg8a
cisco:ioscisco ioseq15.1\(3\)svg3d
cisco:ioscisco ioseq15.1\(3\)svi1b
cisco:ioscisco ioseq15.1\(3\)svm3

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	2.3
cisco:ios	cisco ios	eq	12.2\(6\)i1
cisco:ios	cisco ios	eq	12.4\(25e\)jap1m
cisco:ios	cisco ios	eq	12.4\(25e\)jap2
cisco:ios	cisco ios	eq	12.4\(25e\)jap26
cisco:ios	cisco ios	eq	12.4\(25e\)jaz1
cisco:ios	cisco ios	eq	15.1\(2\)sg8a
cisco:ios	cisco ios	eq	15.1\(3\)svg3d
cisco:ios	cisco ios	eq	15.1\(3\)svi1b
cisco:ios	cisco ios	eq	15.1\(3\)svm3

Rows per page:

1-10 of 2391

CNA Affected

[
  {
    "product": "Cisco IOS and IOS XE Software",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "3.6.4E"
      },
      {
        "status": "affected",
        "version": "3.6.5E"
      },
      {
        "status": "affected",
        "version": "3.6.6E"
      },
      {
        "status": "affected",
        "version": "3.6.5aE"
      },
      {
        "status": "affected",
        "version": "3.6.5bE"
      },
      {
        "status": "affected",
        "version": "3.6.7E"
      },
      {
        "status": "affected",
        "version": "3.6.8E"
      },
      {
        "status": "affected",
        "version": "3.6.7aE"
      },
      {
        "status": "affected",
        "version": "3.6.7bE"
      },
      {
        "status": "affected",
        "version": "3.7.4E"
      },
      {
        "status": "affected",
        "version": "3.7.5E"
      },
      {
        "status": "affected",
        "version": "3.16.1S"
      },
      {
        "status": "affected",
        "version": "3.16.1aS"
      },
      {
        "status": "affected",
        "version": "3.16.2S"
      },
      {
        "status": "affected",
        "version": "3.16.2aS"
      },
      {
        "status": "affected",
        "version": "3.16.3S"
      },
      {
        "status": "affected",
        "version": "3.16.2bS"
      },
      {
        "status": "affected",
        "version": "3.16.3aS"
      },
      {
        "status": "affected",
        "version": "3.16.4S"
      },
      {
        "status": "affected",
        "version": "3.16.4aS"
      },
      {
        "status": "affected",
        "version": "3.16.4bS"
      },
      {
        "status": "affected",
        "version": "3.16.4gS"
      },
      {
        "status": "affected",
        "version": "3.16.5S"
      },
      {
        "status": "affected",
        "version": "3.16.4cS"
      },
      {
        "status": "affected",
        "version": "3.16.4dS"
      },
      {
        "status": "affected",
        "version": "3.16.4eS"
      },
      {
        "status": "affected",
        "version": "3.16.6S"
      },
      {
        "status": "affected",
        "version": "3.16.5aS"
      },
      {
        "status": "affected",
        "version": "3.16.5bS"
      },
      {
        "status": "affected",
        "version": "3.16.7S"
      },
      {
        "status": "affected",
        "version": "3.16.6bS"
      },
      {
        "status": "affected",
        "version": "3.16.7aS"
      },
      {
        "status": "affected",
        "version": "3.16.7bS"
      },
      {
        "status": "affected",
        "version": "3.17.0S"
      },
      {
        "status": "affected",
        "version": "3.17.1S"
      },
      {
        "status": "affected",
        "version": "3.17.2S"
      },
      {
        "status": "affected",
        "version": "3.17.1aS"
      },
      {
        "status": "affected",
        "version": "3.17.3S"
      },
      {
        "status": "affected",
        "version": "3.17.4S"
      },
      {
        "status": "affected",
        "version": "16.2.1"
      },
      {
        "status": "affected",
        "version": "16.2.2"
      },
      {
        "status": "affected",
        "version": "3.8.2E"
      },
      {
        "status": "affected",
        "version": "3.8.3E"
      },
      {
        "status": "affected",
        "version": "3.8.4E"
      },
      {
        "status": "affected",
        "version": "3.8.5E"
      },
      {
        "status": "affected",
        "version": "3.8.5aE"
      },
      {
        "status": "affected",
        "version": "3.8.6E"
      },
      {
        "status": "affected",
        "version": "16.3.1"
      },
      {
        "status": "affected",
        "version": "16.3.2"
      },
      {
        "status": "affected",
        "version": "16.3.3"
      },
      {
        "status": "affected",
        "version": "16.3.1a"
      },
      {
        "status": "affected",
        "version": "16.3.4"
      },
      {
        "status": "affected",
        "version": "16.3.5"
      },
      {
        "status": "affected",
        "version": "16.3.5b"
      },
      {
        "status": "affected",
        "version": "16.3.6"
      },
      {
        "status": "affected",
        "version": "16.4.1"
      },
      {
        "status": "affected",
        "version": "16.4.2"
      },
      {
        "status": "affected",
        "version": "16.4.3"
      },
      {
        "status": "affected",
        "version": "16.5.1"
      },
      {
        "status": "affected",
        "version": "16.5.1a"
      },
      {
        "status": "affected",
        "version": "16.5.1b"
      },
      {
        "status": "affected",
        "version": "16.5.2"
      },
      {
        "status": "affected",
        "version": "16.5.3"
      },
      {
        "status": "affected",
        "version": "3.18.0aS"
      },
      {
        "status": "affected",
        "version": "3.18.0S"
      },
      {
        "status": "affected",
        "version": "3.18.1S"
      },
      {
        "status": "affected",
        "version": "3.18.2S"
      },
      {
        "status": "affected",
        "version": "3.18.3S"
      },
      {
        "status": "affected",
        "version": "3.18.4S"
      },
      {
        "status": "affected",
        "version": "3.18.0SP"
      },
      {
        "status": "affected",
        "version": "3.18.1SP"
      },
      {
        "status": "affected",
        "version": "3.18.1aSP"
      },
      {
        "status": "affected",
        "version": "3.18.1gSP"
      },
      {
        "status": "affected",
        "version": "3.18.1bSP"
      },
      {
        "status": "affected",
        "version": "3.18.1cSP"
      },
      {
        "status": "affected",
        "version": "3.18.2SP"
      },
      {
        "status": "affected",
        "version": "3.18.1hSP"
      },
      {
        "status": "affected",
        "version": "3.18.2aSP"
      },
      {
        "status": "affected",
        "version": "3.18.1iSP"
      },
      {
        "status": "affected",
        "version": "3.18.3SP"
      },
      {
        "status": "affected",
        "version": "3.18.4SP"
      },
      {
        "status": "affected",
        "version": "3.18.3aSP"
      },
      {
        "status": "affected",
        "version": "3.18.3bSP"
      },
      {
        "status": "affected",
        "version": "3.9.0E"
      },
      {
        "status": "affected",
        "version": "3.9.1E"
      },
      {
        "status": "affected",
        "version": "3.9.2E"
      },
      {
        "status": "affected",
        "version": "3.9.2bE"
      },
      {
        "status": "affected",
        "version": "16.6.1"
      },
      {
        "status": "affected",
        "version": "16.6.2"
      },
      {
        "status": "affected",
        "version": "16.6.3"
      },
      {
        "status": "affected",
        "version": "16.7.1"
      },
      {
        "status": "affected",
        "version": "16.7.1a"
      },
      {
        "status": "affected",
        "version": "16.7.1b"
      },
      {
        "status": "affected",
        "version": "16.7.2"
      },
      {
        "status": "affected",
        "version": "16.8.1"
      },
      {
        "status": "affected",
        "version": "16.8.1a"
      },
      {
        "status": "affected",
        "version": "16.8.1b"
      },
      {
        "status": "affected",
        "version": "16.8.1s"
      },
      {
        "status": "affected",
        "version": "16.8.1c"
      },
      {
        "status": "affected",
        "version": "16.8.1d"
      },
      {
        "status": "affected",
        "version": "16.8.2"
      },
      {
        "status": "affected",
        "version": "16.9.1b"
      },
      {
        "status": "affected",
        "version": "16.9.1s"
      },
      {
        "status": "affected",
        "version": "16.9.1c"
      },
      {
        "status": "affected",
        "version": "3.10.0E"
      },
      {
        "status": "affected",
        "version": "3.10.1E"
      },
      {
        "status": "affected",
        "version": "3.10.0cE"
      },
      {
        "status": "affected",
        "version": "3.10.1aE"
      },
      {
        "status": "affected",
        "version": "3.10.1sE"
      }
    ]
  }
]

References

www.securityfocus.com/bid/107617

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-call-home-cert

Social References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.7%

JSON

Related for CVE-2019-1757

prion1 cvelist1 nvd1 cisco1 nessus1 ibm1