CVE-2019-1761
Cisco IOS and IOS XE Software Hot Standby Router Protocol Information Leak Vulnerability
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 4.3EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
28 mar 2019Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A vulnerability in the Hot Standby Router Protocol (HSRP) subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to receive potentially sensitive information from an affected device. The vulnerability is due to insufficient memory initialization. An attacker could exploit this vulnerability by receiving HSRPv2 traffic from an adjacent HSRP member. A successful exploit could allow the attacker to receive potentially sensitive information from the adjacent device.
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Cisco · Cisco IOS and IOS XE SoftwareQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →