First published: Wed Jan 23 2019(Updated: )
A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to exhaust system resources, resulting in a denial of service (DoS) condition. The vulnerability is due to improper resource management for UDP ingress packets. An attacker could exploit this vulnerability by sending a high rate of UDP packets to an affected system within a short period of time. A successful exploit could allow the attacker to exhaust available system resources, resulting in a DoS condition.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IoT Field Network Director | =4.3\(0.20\) |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this vulnerability is CVE-2019-1644.
The severity of CVE-2019-1644 is high with a CVSS score of 7.5.
The affected software for CVE-2019-1644 is Cisco IoT Field Network Director version 4.3(0.20).
An attacker can exploit CVE-2019-1644 by sending malicious UDP packets to exhaust system resources.
Yes, Cisco has released a security advisory with the necessary patches to address the vulnerability. Please refer to the Cisco advisory for further instructions.