CVE-2019-1910

A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS–IS area to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of crafted IS–IS link-state protocol data units (PDUs). An attacker could exploit this vulnerability by sending a crafted link-state PDU to an affected system to be processed. A successful exploit could allow the attacker to cause all routers within the IS–IS area to unexpectedly restart the IS–IS process, resulting in a DoS condition. This vulnerability affects Cisco devices if they are running a vulnerable release of Cisco IOS XR Software earlier than Release 6.6.3 and are configured with the IS–IS routing protocol. Cisco has confirmed that this vulnerability affects both Cisco IOS XR 32-bit Software and Cisco IOS XR 64-bit Software.

• CWE-20
• CWE-20

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-iosxr-isis-dos-1910Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-iosxr-isis-dos-1910Vendor Advisory

Published

Aug 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19092ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate withou…3.5
• CVE-2019-19093eSOMS versions 4.0 to 6.0.3 do not enforce password complexi…6.5
• CVE-2019-19094Lack of input checks for SQL queries in ABB eSOMS versions 3…7.6
• CVE-2019-19095Lack of adequate input/output validation for ABB eSOMS versi…5.4
• CVE-2019-19096The Redis data structure component used in ABB eSOMS version…6.1
• CVE-2019-19097ABB eSOMS versions 4.0 to 6.0.3 accept connections using med…7.5
• CVE-2019-19100A privilege escalation vulnerability in the upgrade service …7.1
• CVE-2019-19101A missing secure communication definition and an incomplete …5.9
• CVE-2019-19102A directory traversal vulnerability in SharpZipLib used in t…7.5
• CVE-2019-19104The web server in ABB Telephone Gateway TG/S 3.2 and Busch-J…9.8
• CVE-2019-19105The backup function in ABB Telephone Gateway TG/S 3.2 and Bu…5.5
• CVE-2019-19106Improper implementation of Access Control in ABB Telephone G…9.1