Lucene search

K
nvd[email protected]NVD:CVE-2019-1705
HistoryMay 03, 2019 - 4:29 p.m.

CVE-2019-1705

2019-05-0316:29:00
CWE-404
web.nvd.nist.gov
3

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

0.002

Percentile

52.2%

A vulnerability in the remote access VPN session manager of Cisco Adaptive Security Appliance (ASA) Software could allow a unauthenticated, remote attacker to cause a denial of service (DoS) condition on the remote access VPN services. The vulnerability is due to an issue with the remote access VPN session manager. An attacker could exploit this vulnerability by requesting an excessive number of remote access VPN sessions. An exploit could allow the attacker to cause a DoS condition.

Affected configurations

Nvd
Node
ciscoadaptive_security_appliance_softwareRange9.49.4.4.34
OR
ciscoadaptive_security_appliance_softwareRange9.59.6.4.25
OR
ciscoadaptive_security_appliance_softwareRange9.79.8.4
OR
ciscoadaptive_security_appliance_softwareRange9.99.9.2.50
OR
ciscoadaptive_security_appliance_softwareRange9.109.10.1.17
AND
ciscoasa_5506-xMatch-
OR
ciscoasa_5506h-xMatch-
OR
ciscoasa_5506w-xMatch-
OR
ciscoasa_5508-xMatch-
OR
ciscoasa_5516-xMatch-
OR
ciscoasa_5525-xMatch-
OR
ciscoasa_5545-xMatch-
OR
ciscoasa_5555-xMatch-
VendorProductVersionCPE
ciscoadaptive_security_appliance_software*cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
ciscoasa_5506-x-cpe:2.3:h:cisco:asa_5506-x:-:*:*:*:*:*:*:*
ciscoasa_5506h-x-cpe:2.3:h:cisco:asa_5506h-x:-:*:*:*:*:*:*:*
ciscoasa_5506w-x-cpe:2.3:h:cisco:asa_5506w-x:-:*:*:*:*:*:*:*
ciscoasa_5508-x-cpe:2.3:h:cisco:asa_5508-x:-:*:*:*:*:*:*:*
ciscoasa_5516-x-cpe:2.3:h:cisco:asa_5516-x:-:*:*:*:*:*:*:*
ciscoasa_5525-x-cpe:2.3:h:cisco:asa_5525-x:-:*:*:*:*:*:*:*
ciscoasa_5545-x-cpe:2.3:h:cisco:asa_5545-x:-:*:*:*:*:*:*:*
ciscoasa_5555-x-cpe:2.3:h:cisco:asa_5555-x:-:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

0.002

Percentile

52.2%

Related for NVD:CVE-2019-1705