CVE-2019-1849— Cisco IOS XR Software 代码问题漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2019-1849の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco IOS XR Software BGP MPLS-Based EVPN Denial of Service Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability in the Border Gateway Patrol (BGP) Multiprotocol Label Switching (MPLS)-based Ethernet VPN (EVPN) implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to a logic error that occurs when the affected software processes specific EVPN routing information. An attacker could exploit this vulnerability by injecting malicious traffic patterns into the targeted EVPN network. A successful exploit could result in a crash of the l2vpn_mgr process on Provider Edge (PE) device members of the same EVPN instance (EVI). On each of the affected devices, a crash could lead to system instability and the inability to process or forward traffic through the device, resulting in a DoS condition that would require manual intervention to restore normal operating conditions.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
对因果或异常条件的不恰当检查
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Cisco IOS XR Software 代码问题漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco IOS XR是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。 Cisco IOS XR中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。以下产品及版本受到影响：Cisco IOS XR 6.1.0版本至6.3.3版本（6.3.3版本已修复），6.4.2之前的6.4.X版本，6.5.2之前的6.5.X版本，6.6.1之前的6.6.X版本。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco IOS XR Software | unspecified ~ n/a | - |
II. CVE-2019-1849の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2019-1849のインテリジェンス情報
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-iosxr-evpn-dosvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2019-1849
Same Patch Batch · Cisco · 2019-05-16 · 18 CVEs total
| CVE-2019-1832 | Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability | |
| CVE-2019-1825 | Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerab | |
| CVE-2019-1824 | Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerab | |
| CVE-2019-1823 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution | |
| CVE-2019-1822 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution | |
| CVE-2019-1821 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution | |
| CVE-2019-1820 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnera | |
| CVE-2019-1819 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnera | |
| CVE-2019-1818 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnera | |
| CVE-2019-1780 | Cisco FXOS and NX-OS Software Command Injection Vulnerability | |
| CVE-2019-1860 | Cisco Unified Intelligence Center Remote File Injection Vulnerability | |
| CVE-2019-1858 | Cisco FXOS and NX-OS Software Simple Network Management Protocol Denial of Service Vulnera | |
| CVE-2019-1853 | Cisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read Vulnerability | |
| CVE-2019-1851 | Cisco Identity Services Engine Arbitrary Client Certificate Creation Vulnerability | |
| CVE-2019-1846 | Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers MPLS OAM Deni | |
| CVE-2019-1833 | Cisco Firepower Threat Defense Software SSL/TLS Policy Bypass Vulnerability | |
| CVE-2019-1768 | Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerability |
IV. 関連脆弱性
同じ製品: Cisco IOS XR Software
- CVE-2026-20118
Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Int - CVE-2026-20046
Cisco IOS XR Software CLI Privilege Escalation Vulnerability - CVE-2026-20074
Cisco IOS XR Software Multi-Instance Intermediate System-to- - CVE-2026-20040
Cisco IOS XR Software CLI Privilege Escalation Vulnerability - CVE-2025-20340
Cisco IOS XR Address Resolution Protocol Broadcast Storm Vul
同じベンダー: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
同じ弱点: CWE-754
- CVE-2026-41662
Admidio: Missing Minimum Administrator Check in Role Members - CVE-2026-35225
Improper timeout handling in CODESYS EtherNetIP - CVE-2026-35366
uutils coreutils printenv Security Inspection Bypass via UTF - CVE-2026-40343
free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPos - CVE-2026-40249
free5gc UDR fail-open request handling in PolicyDataSubsToNo
V. CVE-2019-1849へのコメント
まだコメントはありません