PT-2019-15173

CVE-2019-1750

·

Published

2019-03-27

·

Updated

2019-10-09

Description by

CVSS 3.1
7.4
High
MetricsAV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software on Catalyst 4500 Series Switches (affected versions not specified)
Description The issue is due to incomplete error handling when processing Cisco Discovery Protocol (CDP) packets used with the Easy Virtual Switching System. An unauthenticated, adjacent attacker could exploit this by sending a specially crafted CDP packet, causing the device to reload and resulting in a denial of service (DoS) condition.
Recommendations For Cisco IOS XE Software on Catalyst 4500 Series Switches, apply the software updates released by Cisco that address this issue. As a temporary workaround, consider implementing workarounds that address this vulnerability, as described in the Cisco Security Advisory.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾