CVE-2019-12669

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of a malformed packet. An attacker could exploit this vulnerability by sending a malformed packet to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.

Recommendations Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.