CVE-2019-12643 — Improper Authentication in Cisco IOS XE Software

CWE-287 — Improper Authentication10 documents7 sources
Severity
10.0CRITICALNVD
EPSS
15.4%
top 5.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco IOS XE SoftwareCisco IOS XE
Timeline
PublishedAug 28
Latest updateMay 24

Description

A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on the managed Cisco IOS XE device. The vulnerability is due to an improper check performed by the area of code that manages the REST API authentication service. An attacker could exploit this vulnerability by submitting malicious HTTP requests to the targeted device. A successful exploit could allow the attacker to obtain the token-id…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 3.9 | Impact: 6.0

Affected Packages2 packages

▶CVEListV5cisco/cisco_ios_xe_softwareunspecified — 16.09.03
▶NVDcisco/ios_xe15.5\(3\)s3.16, 16.6.5+1

🔴Vulnerability Details

2
GHSA
GHSA-9j8q-456x-95cx: A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass au↗2022-05-24
▶
CVEList
Cisco REST API Container for IOS XE Software Authentication Bypass Vulnerability↗2019-08-28
▶

🔍Detection Rules

3
Suricata
ET EXPLOIT Cisco REST API Container for Cisco IOS XE Software Authentication Bypass - Token Usage (CVE-2019-12643)↗2022-01-28
▶
Suricata
ET EXPLOIT Cisco REST API Container for Cisco IOS XE Software Authentication Bypass - Successful Exploit (CVE-2019-12643)↗2022-01-28
▶
Suricata
ET EXPLOIT Possible Cisco REST API Container for Cisco IOS XE Software Authentication Bypass Attempt (CVE-2019-12643)↗2022-01-28
▶

📋Vendor Advisories

1
Cisco
Cisco REST API Container for IOS XE Software Authentication Bypass Vulnerability↗2019-08-28
▶

🕵️Threat Intelligence

3
Qualys
Cisco REST API Container for IOS XE Software Authentication Bypass Vulnerability – (CVE-2019-12643)↗2019-08-29
▶
Qualys
Cisco REST API Container for IOS XE Software Authentication Bypass Vulnerability – (CVE-2019-12643) | Qualys↗2019-08-29
▶
Tenable
CVE-2019-12643: Critical Authentication Bypass Vulnerability in REST API Container for Cisco IOS XE↗2019-08-29
▶
CVE-2019-12643 — Improper Authentication in Cisco | cvebase