CVE-2019-1758

A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could exploit this vulnerability by attempting to connect to the network on an 802.1x configured port. A successful exploit could allow the attacker to intermittently obtain access to the network.

• CWE-287
• CWE-287

• http://www.securityfocus.com/bid/107616Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-c6500Patch, Vendor Advisory
• http://www.securityfocus.com/bid/107616Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-c6500Patch, Vendor Advisory

Published

Mar 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17574An issue was discovered in the Popup Maker plugin before 1.8…9.1
• CVE-2019-17575A file-rename filter bypass exists in admin/media/rename.php…7.2
• CVE-2019-17576An issue was discovered in Dolibarr 10.0.2. It has XSS via t…5.4
• CVE-2019-17577An issue was discovered in Dolibarr 10.0.2. It has XSS via t…5.4
• CVE-2019-17578An issue was discovered in Dolibarr 10.0.2. It has XSS via t…5.4
• CVE-2019-17579SonarSource SonarQube before 7.8 has XSS in project links on…6.1
• CVE-2019-17580tonyy dormsystem through 1.3 allows SQL Injection in admin.p…9.8
• CVE-2019-17581tonyy dormsystem through 1.3 allows DOM XSS.6.1
• CVE-2019-17582A use-after-free in the _zip_dirent_read function of zip_dir…9.8
• CVE-2019-17583idreamsoft iCMS 7.0.15 allows remote attackers to cause a de…7.5
• CVE-2019-17584The Meinberg SyncBox/PTP/PTPv2 devices have default SSH keys…7.5
• CVE-2019-17585Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…