CVE-2019-1752
Last modified
CVE-2019-1752 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect processing of specific values in the Q.931 information elements. EPSS estimates a 2.52% chance of exploitation in the next 30 days.
Description
A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect processing of specific values in the Q.931 information elements. An attacker could exploit this vulnerability by calling the affected device with specific Q.931 information elements being present. An exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | 15.0\(1\)m |
| Cisco | Ios | 15.0\(1\)m1 |
| Cisco | Ios | 15.0\(1\)m2 |
| Cisco | Ios | 15.0\(1\)m3 |
| Cisco | Ios | 15.0\(1\)m4 |
| Cisco | Ios | 15.0\(1\)m5 |
| Cisco | Ios | 15.0\(1\)m6 |
| Cisco | Ios | 15.0\(1\)m6a |
| Cisco | Ios | 15.0\(1\)m7 |
| Cisco | Ios | 15.0\(1\)m8 |
| Cisco | Ios | 15.0\(1\)m9 |
| Cisco | Ios | 15.0\(1\)m10 |
| Cisco | Ios | 15.0\(1\)xa |
| Cisco | Ios | 15.0\(1\)xa1 |
| Cisco | Ios | 15.0\(1\)xa2 |
| Cisco | Ios | 15.0\(1\)xa3 |
| Cisco | Ios | 15.0\(1\)xa4 |
| Cisco | Ios | 15.0\(1\)xa5 |
| Cisco | Ios | 15.1\(1\)t |
| Cisco | Ios | 15.1\(1\)t1 |
| Cisco | Ios | 15.1\(1\)t2 |
| Cisco | Ios | 15.1\(1\)t3 |
| Cisco | Ios | 15.1\(1\)t4 |
| Cisco | Ios | 15.1\(1\)t5 |
| Cisco | Ios | 15.1\(1\)xb |
| Cisco | Ios | 15.1\(1\)xb1 |
| Cisco | Ios | 15.1\(1\)xb2 |
| Cisco | Ios | 15.1\(1\)xb3 |
| Cisco | Ios | 15.1\(2\)gc |
| Cisco | Ios | 15.1\(2\)gc1 |
| Cisco | Ios | 15.1\(2\)gc2 |
| Cisco | Ios | 15.1\(2\)t |
| Cisco | Ios | 15.1\(2\)t0a |
| Cisco | Ios | 15.1\(2\)t1 |
| Cisco | Ios | 15.1\(2\)t2 |
| Cisco | Ios | 15.1\(2\)t2a |
| Cisco | Ios | 15.1\(2\)t3 |
| Cisco | Ios | 15.1\(2\)t4 |
| Cisco | Ios | 15.1\(2\)t5 |
| Cisco | Ios | 15.1\(3\)t |
| Cisco | Ios | 15.1\(3\)t1 |
| Cisco | Ios | 15.1\(3\)t2 |
| Cisco | Ios | 15.1\(3\)t3 |
| Cisco | Ios | 15.1\(3\)t4 |
| Cisco | Ios | 15.1\(4\)gc |
| Cisco | Ios | 15.1\(4\)gc1 |
| Cisco | Ios | 15.1\(4\)gc2 |
| Cisco | Ios | 15.1\(4\)m |
| Cisco | Ios | 15.1\(4\)m0a |
| Cisco | Ios | 15.1\(4\)m0b |
Showing 50 of 322 affected configurations. See NVD for the full list.
References
- http://www.securityfocus.com/bid/107589Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/107589Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-1752?
How severe is CVE-2019-1752?
How do I fix CVE-2019-1752?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-17513An issue was discovered in Ratpack before 1.7.5. Due to a mi…7.5
- CVE-2019-17514library/glob.html in the Python 2 and 3 documentation before…7.5
- CVE-2019-17515The CleanTalk cleantalk-spam-protect plugin before 5.127.4 f…6.1
- CVE-2019-17517The Bluetooth Low Energy implementation on Dialog Semiconduc…5.7
- CVE-2019-17518The Bluetooth Low Energy implementation on Dialog Semiconduc…6.5
- CVE-2019-17519The Bluetooth Low Energy implementation on NXP SDK through 2…8.8
- CVE-2019-17520The Bluetooth Low Energy implementation on Texas Instruments…6.5
- CVE-2019-17521An issue was discovered in Landing-CMS 0.0.6. There is a CSR…6.5
- CVE-2019-17522A stored XSS vulnerability was discovered in Hotaru CMS v1.7…4.8
- CVE-2019-17523An XSS vulnerability on Technicolor TC7300 STFA.51.20 device…5.4
- CVE-2019-17524An XSS vulnerability on Technicolor TC7300 STFA.51.20 device…5.4
- CVE-2019-17525The login page on D-Link DIR-615 T1 20.10 devices allows rem…8.8
Are you affected by CVE-2019-1752?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
