CVE-2019-1752

Cisco IOS and IOS XE Software ISDN Interface Denial of Service Vulnerability

State: Published
Severity: 8.6 High
Published: Mar 28, 2019
Updated: Sep 17, 2024
Reserved: Dec 6, 2018

Description

A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect processing of specific values in the Q.931 information elements. An attacker could exploit this vulnerability by calling the affected device with specific Q.931 information elements being present. An exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device.

Scores

CVSS	Score	Vector	Source
3.0	8.6 High	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	cisco

Weaknesses

CWE-20

Affected Products

Product	Versions
Cisco IOS and IOS XE SoftwareCisco	3.8.0SAffected 3.8.1SAffected 3.8.2SAffected 3.9.1SAffected 3.9.0SAffected 3.9.2SAffected 3.9.1aSAffected 3.9.0aSAffected 3.10.0SAffected 3.10.1SAffected 3.10.2SAffected 3.10.3SAffected 3.10.4SAffected 3.10.5SAffected 3.10.6SAffected 3.10.2aSAffected 3.10.2tSAffected 3.10.7SAffected 3.10.8SAffected 3.10.8aSAffected 3.10.9SAffected 3.10.10SAffected 3.11.1SAffected 3.11.2SAffected 3.11.0SAffected and 105 more versions

Product

Versions

Cisco IOS and IOS XE SoftwareCisco

3.8.0SAffected
3.8.1SAffected
3.8.2SAffected
3.9.1SAffected
3.9.0SAffected
3.9.2SAffected
3.9.1aSAffected
3.9.0aSAffected
3.10.0SAffected
3.10.1SAffected
3.10.2SAffected
3.10.3SAffected
3.10.4SAffected
3.10.5SAffected
3.10.6SAffected
3.10.2aSAffected
3.10.2tSAffected
3.10.7SAffected
3.10.8SAffected
3.10.8aSAffected
3.10.9SAffected
3.10.10SAffected
3.11.1SAffected
3.11.2SAffected
3.11.0SAffected
and 105 more versions

References

20190327 Cisco IOS and IOS XE Software ISDN Interface Denial of Service Vulnerabilityvendor-advisory
107589vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.