Strix
26.1K

CVE-2019-1758

UnknownEPSS 0.59%

Last modified

CVE-2019-1758 is a vulnerability of currently unknown severity. A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. EPSS estimates a 0.59% chance of exploitation in the next 30 days.

Description

A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could exploit this vulnerability by attempting to connect to the network on an 802.1x configured port. A successful exploit could allow the attacker to intermittently obtain access to the network.

Metrics

EPSS Probability
0.59%

43.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CiscoIos12.2\(33\)sxj6
CiscoIos12.2\(33\)sxj7
CiscoIos12.2\(33\)sxj8
CiscoIos12.2\(33\)sxj9
CiscoIos12.2\(33\)sxj10
CiscoIos12.2\(60\)ez12
CiscoIos15.1\(1\)sy1
CiscoIos15.1\(1\)sy2
CiscoIos15.1\(1\)sy3
CiscoIos15.1\(1\)sy4
CiscoIos15.1\(1\)sy5
CiscoIos15.1\(1\)sy6
CiscoIos15.1\(2\)sg8a
CiscoIos15.1\(2\)sy
CiscoIos15.1\(2\)sy1
CiscoIos15.1\(2\)sy2
CiscoIos15.1\(2\)sy3
CiscoIos15.1\(2\)sy4
CiscoIos15.1\(2\)sy4a
CiscoIos15.1\(2\)sy5
CiscoIos15.1\(2\)sy6
CiscoIos15.1\(2\)sy7
CiscoIos15.1\(2\)sy8
CiscoIos15.1\(2\)sy9
CiscoIos15.1\(2\)sy10
CiscoIos15.1\(2\)sy11
CiscoIos15.1\(2\)sy12
CiscoIos15.1\(2\)sy13
CiscoIos15.1\(3\)svg3d
CiscoIos15.1\(3\)svi1b
CiscoIos15.1\(3\)svk4b
CiscoIos15.1\(3\)svk4c
CiscoIos15.1\(3\)svm3
CiscoIos15.1\(3\)svn2
CiscoIos15.1\(3\)svo1
CiscoIos15.1\(3\)svo2
CiscoIos15.1\(3\)svp1
CiscoIos15.1\(3\)svp2
CiscoIos15.1\(4\)m12c
CiscoIos15.2\(1\)sy
CiscoIos15.2\(1\)sy0a
CiscoIos15.2\(1\)sy1
CiscoIos15.2\(1\)sy1a
CiscoIos15.2\(1\)sy2
CiscoIos15.2\(1\)sy3
CiscoIos15.2\(1\)sy4
CiscoIos15.2\(1\)sy5
CiscoIos15.2\(1\)sy6
CiscoIos15.2\(1\)sy7
CiscoIos15.2\(2\)sy

Showing 50 of 72 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-1758?
A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could exploit this vulnerability by attempting to connect to the network on an 802.1x configured port. A successful exploit could allow the attacker to intermittently obtain access to the network.
How severe is CVE-2019-1758?
Severity scoring for CVE-2019-1758 is pending analysis. The EPSS model estimates a 0.59% probability of exploitation in the next 30 days.
How do I fix CVE-2019-1758?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-1758?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST