CVE-2019-1759: Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability
A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface. The vulnerability is due to a logic error that was introduced in the Cisco IOS XE Software 16.1.1 Release, which prevents the ACL from working when applied against the management interface. An attacker could exploit this issue by attempting to access the device via the management interface.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1759?
The severity of CVE-2019-1759 is rated as critical due to its potential to allow unauthenticated remote attackers to access sensitive parts of the network.
How do I fix CVE-2019-1759?
To fix CVE-2019-1759, it is recommended to apply the latest software updates provided by Cisco for affected versions of IOS XE.
Which versions of Cisco IOS XE are affected by CVE-2019-1759?
CVE-2019-1759 affects multiple versions of Cisco IOS XE, including versions from 3.2.0ja to 16.9.2.
What impact does CVE-2019-1759 have on my network security?
CVE-2019-1759 can impact network security by allowing unauthorized access to management interfaces, potentially compromising network devices.
Is there a workaround for CVE-2019-1759 if a patch cannot be immediately applied?
Yes, as a workaround for CVE-2019-1759, network administrators can enforce strong ACLs to restrict access to the management interfaces until a patch can be applied.