CVE-2019-12653

Cisco IOS XE Software Raw Socket Transport Denial of Service Vulnerability

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

A vulnerability in the Raw Socket Transport feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper parsing of Raw Socket Transport payloads. An attacker could exploit this vulnerability by establishing a TCP session and then sending a malicious TCP segment via IPv4 to an affected device. This cannot be exploited via IPv6, as the Raw Socket Transport feature does not support IPv6 as a network layer protocol.

Una vulnerabilidad en la funcionalidad Raw Socket Transport del software Cisco IOS XE, podría permitir a un atacante remoto no autenticado desencadenar una recarga de un dispositivo afectado, resultando en una condición de denegación de servicio (DoS). La vulnerabilidad es debido al análisis inapropiado de las cargas útiles de Raw Socket Transport. Un atacante podría explotar esta vulnerabilidad al establecer una sesión TCP y entonces enviar un segmento TCP malicioso por medio de IPv4 hacia un dispositivo afectado. Esto no puede ser explotado por medio de IPv6, ya que la función de Raw Socket Transport no admite IPv6 como protocolo de capa de red.

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2019-06-04 CVE Reserved
2019-09-25 CVE Published
2023-03-07 EPSS Updated
2024-11-19 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-rawtcp-dos	2019-10-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	16.9 Search vendor "Cisco" for product "Ios Xe" and version "16.9"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 902 Search vendor "Cisco" for product "Asr 902"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	16.9 Search vendor "Cisco" for product "Ios Xe" and version "16.9"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 902u Search vendor "Cisco" for product "Asr 902u"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	16.9 Search vendor "Cisco" for product "Ios Xe" and version "16.9"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 903 Search vendor "Cisco" for product "Asr 903"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	16.9 Search vendor "Cisco" for product "Ios Xe" and version "16.9"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 907 Search vendor "Cisco" for product "Asr 907"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	16.9 Search vendor "Cisco" for product "Ios Xe" and version "16.9"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 914 Search vendor "Cisco" for product "Asr 914"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	16.10.1 Search vendor "Cisco" for product "Ios Xe" and version "16.10.1"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 902 Search vendor "Cisco" for product "Asr 902"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	16.10.1 Search vendor "Cisco" for product "Ios Xe" and version "16.10.1"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 902u Search vendor "Cisco" for product "Asr 902u"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	16.10.1 Search vendor "Cisco" for product "Ios Xe" and version "16.10.1"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 903 Search vendor "Cisco" for product "Asr 903"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	16.10.1 Search vendor "Cisco" for product "Ios Xe" and version "16.10.1"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 907 Search vendor "Cisco" for product "Asr 907"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	16.10.1 Search vendor "Cisco" for product "Ios Xe" and version "16.10.1"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 914 Search vendor "Cisco" for product "Asr 914"	-	-	Safe