CVE-2019-12656

published 2019-09-25

CVE-2019-12656: A vulnerability in the IOx application environment of multiple Cisco platforms could allow an unauthenticated, remote attacker to cause the IOx web server to…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A vulnerability in the IOx application environment of multiple Cisco platforms could allow an unauthenticated, remote attacker to cause the IOx web server to stop processing HTTPS requests, resulting in a denial of service (DoS) condition. The vulnerability is due to a Transport Layer Security (TLS) implementation issue. An attacker could exploit this vulnerability by sending crafted TLS packets to the IOx web server on an affected device. A successful exploit could allow the attacker to cause the IOx web server to stop processing HTTPS requests, resulting in a DoS condition.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_industrial_routers_operating_system_software	>= unspecified < n/a	n/a
cisco	industrial_ethernet_2000_series_firmware	—	—
cisco	ios	—	—
cisco	ios	—	—
cisco	iox_application_environment	—	—

CWE-20