CVE-2019-1758

CWE-287 — Improper Authentication4 documents4 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 55.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Cisco IOS SoftwareCisco IOS
Timeline
PublishedMar 28
Latest updateMay 13

Description

A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could exploit this vulnerability by attempting to connect to the network on an 802.1x configured port. A successful exploit could allow the attacker to intermittently obtain access to the network.

CVSS vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5cisco/cisco_ios_software12.2(60)EZ12
▶NVDcisco/ios72 versions+71

Patches

Patch: tools.cisco.com ↗Patch: tools.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-w5hf-6q7f-jjqv: A vulnerability in 802↗2022-05-13
▶
CVEList
Cisco IOS Software Catalyst 6500 Series 802.1x Authentication Bypass Vulnerability↗2019-03-28
▶

📋Vendor Advisories

1
Cisco
Cisco IOS Software Catalyst 6500 Series 802.1x Authentication Bypass Vulnerability↗2019-03-27
▶