CVE-1999-0222: Medium severity Cisco router vulnerability
Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the Cisco IOS web (HTTP) management server on affected routers if it is not required. If the web server is required, restrict or remove its exposure to untrusted networks.
Cisco IOS web server web (HTTP) management interface = disabled - Compensating control
Restrict access to the router's web management interface to trusted management IPs or networks using firewall rules or ACLs. Block HTTP access from untrusted networks to mitigate exploitation via long URLs.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0222?
CVE-1999-0222 is classified as a denial of service vulnerability that can disrupt router operations.
How do I fix CVE-1999-0222?
To fix CVE-1999-0222, you should upgrade to a patched version of Cisco IOS that addresses this vulnerability.
What devices are affected by CVE-1999-0222?
CVE-1999-0222 affects Cisco routers running certain versions of Cisco IOS with a web server feature enabled.
What symptoms are associated with CVE-1999-0222?
Symptoms of CVE-1999-0222 include unexpected router reboots when sending a specially crafted long URL to the device.
Can CVE-1999-0222 be exploited remotely?
Yes, CVE-1999-0222 can be exploited remotely by attackers targeting the vulnerable Cisco IOS web server.