A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of attributes in RADIUS messages. An attacker could exploit this vulnerability by sending a malicious RADIUS message to an affected device while the device is in a specific state.
Metrics
Affected Vendors & Products
References
History
Thu, 21 Nov 2024 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2019-09-25T20:15:34.281392Z
Updated: 2024-11-21T19:14:06.577Z
Reserved: 2019-06-04T00:00:00
Link: CVE-2019-12663
Vulnrichment
Updated: 2024-08-04T23:24:39.254Z
NVD
Status : Modified
Published: 2019-09-25T21:15:11.267
Modified: 2024-11-21T04:23:18.320
Link: CVE-2019-12663
Redhat
No data.