CVE-2019-1711
Cisco IOS XR gRPC Software Denial of Service Vulnerability
- State
- Published
- Severity
- 5.3 Medium
- Published
- Apr 17, 2019
- Updated
- Nov 19, 2024
- Reserved
- Dec 6, 2018
Description
A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this vulnerability by repeatedly sending unauthenticated gRPC requests to the affected device. A successful exploit could cause the emsd process to crash, resulting in a DoS condition. Resolved in Cisco IOS XR 6.5.1 and later.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco IOS XR SoftwareCisco |
|
References
- 20190417 Cisco IOS XR gRPC Software Denial of Service Vulnerabilityvendor-advisory
- 108017vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.