CVE-2019-1759
Summary
| CVE | CVE-2019-1759 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-03-28 01:29:00 UTC |
| Updated | 2020-10-09 14:23:00 UTC |
| Description | A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface. The vulnerability is due to a logic error that was introduced in the Cisco IOS XE Software 16.1.1 Release, which prevents the ACL from working when applied against the management interface. An attacker could exploit this issue by attempting to access the device via the management interface. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cisco | Ios Xe | 16.2.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.2.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.3 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.4 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.5 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.5b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.6 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.7 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.4.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.4.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.4.3 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.5.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.5.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.5.1b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.5.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.5.3 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.6.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.6.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.6.3 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.6.4 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.6.4a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.6.4s | All | All | All |
| Operating System | Cisco | Ios Xe | 16.7.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.7.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.7.1b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.7.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1c | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1d | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1e | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1c | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1d | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.0ja | All | All | All |
| Operating System | Cisco | Ios Xe | 16.2.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.2.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.3 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.4 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.5 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.5b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.6 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.3.7 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.4.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.4.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.4.3 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.5.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.5.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.5.1b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.5.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.5.3 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.6.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.6.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.6.3 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.6.4 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.6.4a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.6.4s | All | All | All |
| Operating System | Cisco | Ios Xe | 16.7.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.7.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.7.1b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.7.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1c | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1d | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1e | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 16.8.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1c | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1d | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.0ja | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco IOS XE Software CVE-2019-1759 Remote Security Bypass Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability | CISCO | tools.cisco.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.