CVE-2019-1751
Last modified
CVE-2019-1751 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. A vulnerability in the Network Address Translation 64 (NAT64) functions of Cisco IOS Software could allow an unauthenticated, remote attacker to cause either an interface queue wedge or a device reload. The vulnerability is due to the incorrect handling of certain IPv4 packet streams that are sent through the device. EPSS estimates a 2.52% chance of exploitation in the next 30 days.
Description
A vulnerability in the Network Address Translation 64 (NAT64) functions of Cisco IOS Software could allow an unauthenticated, remote attacker to cause either an interface queue wedge or a device reload. The vulnerability is due to the incorrect handling of certain IPv4 packet streams that are sent through the device. An attacker could exploit this vulnerability by sending specific IPv4 packet streams through the device. An exploit could allow the attacker to either cause an interface queue wedge or a device reload, resulting in a denial of service (DoS) condition.
Metrics
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | 15.4\(1\)cg1 |
| Cisco | Ios | 15.4\(1\)t |
| Cisco | Ios | 15.4\(1\)t1 |
| Cisco | Ios | 15.4\(1\)t2 |
| Cisco | Ios | 15.4\(1\)t3 |
| Cisco | Ios | 15.4\(1\)t4 |
| Cisco | Ios | 15.4\(2\)t |
| Cisco | Ios | 15.4\(2\)t1 |
| Cisco | Ios | 15.4\(2\)t2 |
| Cisco | Ios | 15.4\(2\)t3 |
| Cisco | Ios | 15.4\(2\)t4 |
| Cisco | Ios | 15.4\(3\)m |
| Cisco | Ios | 15.4\(3\)m1 |
| Cisco | Ios | 15.4\(3\)m2 |
| Cisco | Ios | 15.4\(3\)m3 |
| Cisco | Ios | 15.4\(3\)m4 |
| Cisco | Ios | 15.4\(3\)m5 |
| Cisco | Ios | 15.4\(3\)m6 |
| Cisco | Ios | 15.4\(3\)m6a |
| Cisco | Ios | 15.4\(3\)m7 |
| Cisco | Ios | 15.4\(3\)m7a |
| Cisco | Ios | 15.4\(3\)m8 |
| Cisco | Ios | 15.4\(3\)m9 |
| Cisco | Ios | 15.4\(3\)m10 |
| Cisco | Ios | 15.5\(1\)t |
| Cisco | Ios | 15.5\(1\)t1 |
| Cisco | Ios | 15.5\(1\)t2 |
| Cisco | Ios | 15.5\(1\)t3 |
| Cisco | Ios | 15.5\(1\)t4 |
| Cisco | Ios | 15.5\(2\)t |
| Cisco | Ios | 15.5\(2\)t1 |
| Cisco | Ios | 15.5\(2\)t2 |
| Cisco | Ios | 15.5\(2\)t3 |
| Cisco | Ios | 15.5\(2\)t4 |
| Cisco | Ios | 15.5\(2\)xb |
| Cisco | Ios | 15.5\(3\)m |
| Cisco | Ios | 15.5\(3\)m0a |
| Cisco | Ios | 15.5\(3\)m1 |
| Cisco | Ios | 15.5\(3\)m2 |
| Cisco | Ios | 15.5\(3\)m2a |
| Cisco | Ios | 15.5\(3\)m3 |
| Cisco | Ios | 15.5\(3\)m4 |
| Cisco | Ios | 15.5\(3\)m4a |
| Cisco | Ios | 15.5\(3\)m4b |
| Cisco | Ios | 15.5\(3\)m4c |
| Cisco | Ios | 15.5\(3\)m5 |
| Cisco | Ios | 15.5\(3\)m5a |
| Cisco | Ios | 15.5\(3\)m6 |
| Cisco | Ios | 15.5\(3\)m6a |
| Cisco | Ios | 15.5\(3\)m7 |
Showing 50 of 80 affected configurations. See NVD for the full list.
References
- http://www.securityfocus.com/bid/107601Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/107601Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-1751?
How severe is CVE-2019-1751?
How do I fix CVE-2019-1751?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-17504An issue was discovered in Kirona Dynamic Resource Schedulin…6.1
- CVE-2019-17505D-Link DAP-1320 A2-V1.21 routers have some web interfaces wi…7.5
- CVE-2019-17506There are some web interfaces without authentication require…9.8
- CVE-2019-17507An issue was discovered on D-Link DIR-816 A1 1.06 devices. A…7.5
- CVE-2019-17508On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/se…9.8
- CVE-2019-17509D-Link DIR-846 devices with firmware 100A35 allow remote att…9.8
- CVE-2019-17510D-Link DIR-846 devices with firmware 100A35 allow remote att…9.8
- CVE-2019-17511There are some web interfaces without authentication require…7.5
- CVE-2019-17512There are some web interfaces without authentication require…9.1
- CVE-2019-17513An issue was discovered in Ratpack before 1.7.5. Due to a mi…7.5
- CVE-2019-17514library/glob.html in the Python 2 and 3 documentation before…7.5
- CVE-2019-17515The CleanTalk cleantalk-spam-protect plugin before 5.127.4 f…6.1
Are you affected by CVE-2019-1751?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
