Cisco Ios 12.2 B vulnerabilities

2 known vulnerabilities affecting cisco/cisco_ios_12.2_b.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2

Vulnerabilities

Page 1 of 1

CVE-2019-16009HIGHCVSS 8.8vn/a2020-09-23

CVE-2019-16009 [HIGH] CWE-352 CVE-2019-16009: A vulnerability in the web UI of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, A vulnerability in the web UI of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected device. An attacker could exploit this vulnerability by persuading a us

CVE-2019-12665HIGHCVSS 7.4≥ unspecified, < n/a2019-09-25

CVE-2019-12665 [HIGH] CWE-399 CVE-2019-12665: A vulnerability in the HTTP client feature of Cisco IOS and IOS XE Software could allow an unauthent A vulnerability in the HTTP client feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to read and modify data that should normally have been sent via an encrypted channel. The vulnerability is due to TCP port information not being considered when matching new requests to existing, persistent HTTP connections. An a