CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
EPSS
Percentile
47.2%
A vulnerability in the hardware crypto driver of Cisco IOS XE Software for Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers could allow an unauthenticated, remote attacker to disconnect legitimate IPsec VPN sessions to an affected device. The vulnerability is due to insufficient verification of authenticity of received Encapsulating Security Payload (ESP) packets. An attacker could exploit this vulnerability by tampering with ESP cleartext values as a man-in-the-middle.
Vendor | Product | Version | CPE |
---|---|---|---|
cisco | ios_xe | 16.4.1 | cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:* |
cisco | ios_xe | 16.4.2 | cpe:2.3:o:cisco:ios_xe:16.4.2:*:*:*:*:*:*:* |
cisco | ios_xe | 16.4.3 | cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:* |
cisco | ios_xe | 16.5.1 | cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:* |
cisco | ios_xe | 16.5.1a | cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:* |
cisco | ios_xe | 16.5.1b | cpe:2.3:o:cisco:ios_xe:16.5.1b:*:*:*:*:*:*:* |
cisco | ios_xe | 16.5.2 | cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:* |
cisco | ios_xe | 16.5.3 | cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:* |
cisco | ios_xe | 16.6.1 | cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:* |
cisco | ios_xe | 16.6.2 | cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
EPSS
Percentile
47.2%