CVE-2019-1750

A vulnerability in the Easy Virtual Switching System (VSS) of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol (CDP) packets used with the Easy Virtual Switching System. An attacker could exploit this vulnerability by sending a specially crafted CDP packet. An exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.

• CWE-20
• CWE-388

• http://www.securityfocus.com/bid/107607Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-evssPatch, Vendor Advisory
• http://www.securityfocus.com/bid/107607Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-evssPatch, Vendor Advisory

Published

Mar 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17494laravel-bjyblog 6.1.1 has XSS via a crafted URL.6.1
• CVE-2019-17495A Cascading Style Sheets (CSS) injection vulnerability in Sw…9.8
• CVE-2019-17496Craft CMS before 3.3.8 has stored XSS via a name field. This…6.1
• CVE-2019-17497Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO …6.5
• CVE-2019-17498In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNE…8.1
• CVE-2019-17499The setter.xml component of the Common Gateway Interface on …8.8
• CVE-2019-17501Centreon 19.04 allows attackers to execute arbitrary OS comm…8.8
• CVE-2019-17502Hydra through 0.1.8 has a NULL pointer dereference and daemo…7.5
• CVE-2019-17503An issue was discovered in Kirona Dynamic Resource Schedulin…5.3
• CVE-2019-17504An issue was discovered in Kirona Dynamic Resource Schedulin…6.1
• CVE-2019-17505D-Link DAP-1320 A2-V1.21 routers have some web interfaces wi…7.5
• CVE-2019-17506There are some web interfaces without authentication require…9.8