CVE-2019-12656 (CNNVD-201909-1169)
中文标题:
多款Cisco产品输入验证错误漏洞
英文标题:
Cisco IOx Application Environment Denial of Service Vulnerability
漏洞描述
中文描述:
Cisco Industrial Routers Operating System Software等都是美国思科（Cisco）公司的产品。Industrial Routers Operating System Software是一套用于路由器的操作系统。CGR 1000 IOx Compute Platform Firmware是一套用于CGR 1000计算模块的固件。Industrial Compute Gateway Software是一套用于Cisco计算网关产品的操作系统。 多款Cisco产品中的Iox应用程序环境的安全传输层协议（TLS）的实现存在输入验证错误漏洞。远程攻击者可通过向IOx Web服务器发送特制的TLS数据包利用该漏洞造成拒绝服务。以下产品及版本受到影响：Industrial Routers Operating System Software（Cisco 510 WPAN Industrial Router）；CGR 1000 IOx Compute Platform Firmware（Cisco CGR 1000 Compute Module）；Industrial Compute Gateway Software（Cisco IC3000 Industrial Compute Gateway）；Cisco IOS Software（Cisco Industrial Ethernet 4000 Series Switches）。
英文描述:
A vulnerability in the IOx application environment of multiple Cisco platforms could allow an unauthenticated, remote attacker to cause the IOx web server to stop processing HTTPS requests, resulting in a denial of service (DoS) condition. The vulnerability is due to a Transport Layer Security (TLS) implementation issue. An attacker could exploit this vulnerability by sending crafted TLS packets to the IOx web server on an affected device. A successful exploit could allow the attacker to cause the IOx web server to stop processing HTTPS requests, resulting in a DoS condition.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Industrial Routers Operating System Software | - | < n/a | - |
cpe:2.3:a:cisco:cisco_industrial_routers_operating_system_software:*:*:*:*:*:*:*:*
|
| cisco | ios | 1.6.0.0 | - | - |
cpe:2.3:o:cisco:ios:1.6.0.0:*:*:*:*:*:*:*
|
| cisco | ios | 1.8.0 | - | - |
cpe:2.3:o:cisco:ios:1.8.0:*:*:*:*:*:*:*
|
| cisco | industrial_ethernet_2000_series_firmware | 15.2\(6\)e | - | - |
cpe:2.3:o:cisco:industrial_ethernet_2000_series_firmware:15.2\(6\)e:*:*:*:*:*:*:*
|
| cisco | ic3000_firmware | - | - | - |
cpe:2.3:o:cisco:ic3000_firmware:-:*:*:*:*:*:*:*
|
| cisco | ie_4000_firmware | - | - | - |
cpe:2.3:o:cisco:ie_4000_firmware:-:*:*:*:*:*:*:*
|
| cisco | cgr_1000_firmware | - | - | - |
cpe:2.3:o:cisco:cgr_1000_firmware:-:*:*:*:*:*:*:*
|
| cisco | ir510_wpan_firmware | - | - | - |
cpe:2.3:o:cisco:ir510_wpan_firmware:-:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.0 (cna)
HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2019-12656 |
2025-11-11 15:20:00 | 2025-11-11 07:35:30 |
| NVD | nvd_CVE-2019-12656 |
2025-11-11 14:56:27 | 2025-11-11 07:44:03 |
| CNNVD | cnnvd_CNNVD-201909-1169 |
2025-11-11 15:10:17 | 2025-11-11 07:54:52 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 输入验证错误
- cnnvd_id: 未提取 -> CNNVD-201909-1169
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 8
- data_sources: ['cve'] -> ['cve', 'nvd']