CVE-2019-1758: Cisco IOS Software Catalyst 6500 Series 802.1x Authentication Bypass Vulnerability

Published Mar 28, 2019

Updated

A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could exploit this vulnerability by attempting to connect to the network on an 802.1x configured port. A successful exploit could allow the attacker to intermittently obtain access to the network.

Affected Software

72 affected components

Cisco IOS=12.2\(33\)sxj6

Cisco IOS=12.2\(33\)sxj7

Cisco IOS=12.2\(33\)sxj8

Cisco IOS=12.2\(33\)sxj9

Cisco IOS=12.2\(33\)sxj10

Cisco IOS=12.2\(60\)ez12

Cisco IOS=15.1\(1\)sy1

Cisco IOS=15.1\(1\)sy2

Cisco IOS=15.1\(1\)sy3

Cisco IOS=15.1\(1\)sy4

Cisco IOS=15.1\(1\)sy5

Cisco IOS=15.1\(1\)sy6

Cisco IOS=15.1\(2\)sg8a

Cisco IOS=15.1\(2\)sy

Cisco IOS=15.1\(2\)sy1

Cisco IOS=15.1\(2\)sy2

Cisco IOS=15.1\(2\)sy3

Cisco IOS=15.1\(2\)sy4

Cisco IOS=15.1\(2\)sy4a

Cisco IOS=15.1\(2\)sy5

Cisco IOS=15.1\(2\)sy6

Cisco IOS=15.1\(2\)sy7

Cisco IOS=15.1\(2\)sy8

Cisco IOS=15.1\(2\)sy9

Cisco IOS=15.1\(2\)sy10

Cisco IOS=15.1\(2\)sy11

Cisco IOS=15.1\(2\)sy12

Cisco IOS=15.1\(2\)sy13

Cisco IOS=15.1\(3\)svg3d

Cisco IOS=15.1\(3\)svi1b

Cisco IOS=15.1\(3\)svk4b

Cisco IOS=15.1\(3\)svk4c

Cisco IOS=15.1\(3\)svm3

Cisco IOS=15.1\(3\)svn2

Cisco IOS=15.1\(3\)svo1

Cisco IOS=15.1\(3\)svo2

Cisco IOS=15.1\(3\)svp1

Cisco IOS=15.1\(3\)svp2

Cisco IOS=15.1\(4\)m12c

Cisco IOS=15.2\(1\)sy

Cisco IOS=15.2\(1\)sy0a

Cisco IOS=15.2\(1\)sy1

Cisco IOS=15.2\(1\)sy1a

Cisco IOS=15.2\(1\)sy2

Cisco IOS=15.2\(1\)sy3

Cisco IOS=15.2\(1\)sy4

Cisco IOS=15.2\(1\)sy5

Cisco IOS=15.2\(1\)sy6

Cisco IOS=15.2\(1\)sy7

Cisco IOS=15.2\(2\)sy

Cisco IOS=15.2\(2\)sy1

Cisco IOS=15.2\(2\)sy2

Cisco IOS=15.2\(2\)sy3

Cisco IOS=15.2\(3\)ea1

Cisco IOS=15.2\(4\)jn1

Cisco IOS=15.2\(4a\)ea5

Cisco IOS=15.3\(0\)sy

Cisco IOS=15.3\(1\)sy

Cisco IOS=15.3\(1\)sy1

Cisco IOS=15.3\(1\)sy2

Cisco IOS=15.3\(3\)ja1n

Cisco IOS=15.3\(3\)jf35

Cisco IOS=15.3\(3\)ji2

Cisco IOS=15.4\(1\)sy

Cisco IOS=15.4\(1\)sy1

Cisco IOS=15.4\(1\)sy2

Cisco IOS=15.4\(1\)sy3

Cisco IOS=15.4\(1\)sy4

Cisco IOS=15.5\(1\)sy

Cisco IOS=15.5\(1\)sy1

Cisco IOS=15.5\(1\)sy2

Cisco IOS=15.6\(2\)sp3b

Remediation

Patch Available

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-c6500

Event History

Mar 28, 2019

CVE Published

via MITRE·12:20 AM

Data Sourced

via MITRE·12:20 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:29 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-1758?

CVE-2019-1758 has been classified with a high severity due to its potential to allow an unauthenticated attacker to gain access to the network.

How do I fix CVE-2019-1758?

The recommended fix for CVE-2019-1758 is to upgrade to a patched version of Cisco IOS Software as provided in Cisco's security advisory.

Who is affected by CVE-2019-1758?

CVE-2019-1758 affects Cisco IOS Software running on various models of the Catalyst 6500 Series Switches.

What is the impact of CVE-2019-1758?

The impact of CVE-2019-1758 allows an attacker to bypass authentication and gain unauthorized network access.

When was CVE-2019-1758 disclosed?

CVE-2019-1758 was disclosed on March 27, 2019.