Strix
26.1K

CVE-2019-1739

HIGHCVSS 7.5/10EPSS 2.52%

Last modified

CVE-2019-1739 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a parsing issue on DNS packets. EPSS estimates a 2.52% chance of exploitation in the next 30 days.

Description

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a parsing issue on DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability
2.52%

82.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CiscoIos15.1\(2\)sg8a
CiscoIos15.1\(3\)svg3d
CiscoIos15.1\(3\)svi1b
CiscoIos15.1\(3\)svk4b
CiscoIos15.1\(3\)svk4c
CiscoIos15.1\(3\)svm3
CiscoIos15.1\(3\)svn2
CiscoIos15.1\(3\)svo1
CiscoIos15.1\(3\)svo2
CiscoIos15.1\(3\)svo3
CiscoIos15.1\(3\)svo4
CiscoIos15.1\(3\)svp1
CiscoIos15.1\(3\)svp2
CiscoIos15.1\(4\)m12c
CiscoIos15.2\(3\)ea1
CiscoIos15.2\(4a\)ea5
CiscoIos15.3\(3\)ja1n
CiscoIos15.3\(3\)jd
CiscoIos15.3\(3\)jd2
CiscoIos15.3\(3\)jd3
CiscoIos15.3\(3\)jd4
CiscoIos15.3\(3\)jd5
CiscoIos15.3\(3\)jd6
CiscoIos15.3\(3\)jd7
CiscoIos15.3\(3\)jd8
CiscoIos15.3\(3\)jd9
CiscoIos15.3\(3\)jd11
CiscoIos15.3\(3\)jd12
CiscoIos15.3\(3\)jd13
CiscoIos15.3\(3\)jd14
CiscoIos15.3\(3\)je
CiscoIos15.3\(3\)jf
CiscoIos15.3\(3\)jf1
CiscoIos15.3\(3\)jf2
CiscoIos15.3\(3\)jf4
CiscoIos15.3\(3\)jf5
CiscoIos15.3\(3\)jf35
CiscoIos15.3\(3\)jg
CiscoIos15.3\(3\)jg1
CiscoIos15.3\(3\)jh
CiscoIos15.3\(3\)ji
CiscoIos15.3\(3\)ji2
CiscoIos15.3\(3\)jnp
CiscoIos15.3\(3\)jnp1
CiscoIos15.3\(3\)jnp3
CiscoIos15.3\(3\)jpb
CiscoIos15.3\(3\)jpb1
CiscoIos15.3\(3\)jpc
CiscoIos15.3\(3\)jpc1
CiscoIos15.3\(3\)jpc2

Showing 50 of 164 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-1739?
A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a parsing issue on DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.
How severe is CVE-2019-1739?
CVE-2019-1739 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 2.52% probability of exploitation in the next 30 days.
How do I fix CVE-2019-1739?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-1739?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST