PT-2019-15173
CVE-2019-1750
·
تاريخ النشر
2019-03-27
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
7.4
عاليةالمقاييسAV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Cisco IOS XE Software on Catalyst 4500 Series Switches (affected versions not specified)
Description
The issue is due to incomplete error handling when processing Cisco Discovery Protocol (CDP) packets used with the Easy Virtual Switching System. An unauthenticated, adjacent attacker could exploit this by sending a specially crafted CDP packet, causing the device to reload and resulting in a denial of service (DoS) condition.
Recommendations
For Cisco IOS XE Software on Catalyst 4500 Series Switches, apply the software updates released by Cisco that address this issue.
As a temporary workaround, consider implementing workarounds that address this vulnerability, as described in the Cisco Security Advisory.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾