Cisco IOS XE Easy Virtual Switching System CDP Packet 7pk error

Summaryinfo

A vulnerability was found in Cisco IOS XE. It has been declared as problematic. This affects an unknown part of the component Easy Virtual Switching System. Such manipulation as part of CDP Packet leads to 7pk error. This vulnerability is referenced as CVE-2019-1750. The attack needs to be initiated within the local network. No exploit is available.

Detailsinfo

A vulnerability was found in Cisco IOS XE (Router Operating System) (version now known) and classified as problematic. Affected by this issue is some unknown processing of the component Easy Virtual Switching System. The manipulation as part of a CDP Packet leads to a 7pk error vulnerability. Using CWE to declare the problem leads to CWE-388. Impacted is availability. CVE summarizes:

A vulnerability in the Easy Virtual Switching System (VSS) of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol (CDP) packets used with the Easy Virtual Switching System. An attacker could exploit this vulnerability by sending a specially crafted CDP packet. An exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.

The bug was discovered 03/27/2019. The weakness was published 03/28/2019 as cisco-sa-20190327-evss as confirmed advisory (Website). The advisory is available at tools.cisco.com. This vulnerability is handled as CVE-2019-1750 since 12/06/2018. Access to the local network is required for this attack to succeed. No form of authentication is required for exploitation. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $5k-$25k at the moment (estimation calculated on 08/17/2023).

The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $5k-$25k. The commercial vulnerability scanner Qualys is able to test this issue with plugin 316408 (Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability(cisco-sa-20190327-evss)).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Similar entries are available at VDB-132534 and VDB-132533. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Router Operating System

Vendor

• Cisco

Name

• IOS XE

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion