CVE-2019-12663

A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of attributes in RADIUS messages. An attacker could exploit this vulnerability by sending a malicious RADIUS message to an affected device while the device is in a specific state.

• CWE-20
• CWE-20

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-ctspac-dosVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-ctspac-dosVendor Advisory

Published

Sep 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12658A vulnerability in the filesystem resource management code o…7.5
• CVE-2019-12659A vulnerability in the HTTP server code of Cisco IOS XE Soft…7.5
• CVE-2019-1266A spoofing vulnerability exists in Microsoft Exchange Server…6.1
• CVE-2019-12660A vulnerability in the CLI of Cisco IOS XE Software could al…5.5
• CVE-2019-12661A vulnerability in a Virtualization Manager (VMAN) related C…6.7
• CVE-2019-12662A vulnerability in Cisco NX-OS Software and Cisco IOS XE Sof…6.7
• CVE-2019-12664A vulnerability in the Dialer interface feature for ISDN con…7.5
• CVE-2019-12665A vulnerability in the HTTP client feature of Cisco IOS and …7.4
• CVE-2019-12666A vulnerability in the Guest Shell of Cisco IOS XE Software …6.7
• CVE-2019-12667A vulnerability in the web framework code of Cisco IOS XE So…4.8
• CVE-2019-12668A vulnerability in the web framework code of Cisco IOS and C…4.8
• CVE-2019-12669A vulnerability in the RADIUS Change of Authorization (CoA) …7.5