Vulnerability-Lookup

CNVD-2020-34304

Vulnerability from cnvd - Published: 2020-06-23

Title

Cisco Catalyst 6500 Series Switches Cisco IOS授权问题漏洞

Description

Cisco Catalyst 6500 Series Switches是美国思科（Cisco）公司的一款6500系列模块化机箱交换机。Cisco IOS是其中的一套为其网络设备开发的操作系统。 Cisco Catalyst 6500 Series Switches Cisco IOS授权问题漏洞。攻击者可利用该漏洞不进行身份验证便可访问网络。未认证邻近攻击者可通过尝试在配置802.1x的端口上连接到网络利用该漏洞间歇性获得网络访问权。

Severity

低

Patch Name

Cisco Catalyst 6500 Series Switches Cisco IOS授权问题漏洞的补丁

Patch Description

Formal description

厂商已发布漏洞修复程序，请及时关注更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-c6500

Reference

https://nvd.nist.gov/vuln/detail/CVE-2019-1758

Impacted products

Name
Cisco Catalyst 6500 Series Switches

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-1758"
    }
  },
  "description": "Cisco Catalyst 6500 Series Switches\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u6b3e6500\u7cfb\u5217\u6a21\u5757\u5316\u673a\u7bb1\u4ea4\u6362\u673a\u3002Cisco IOS\u662f\u5176\u4e2d\u7684\u4e00\u5957\u4e3a\u5176\u7f51\u7edc\u8bbe\u5907\u5f00\u53d1\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\n\nCisco Catalyst 6500 Series Switches Cisco IOS\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4e0d\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u4fbf\u53ef\u8bbf\u95ee\u7f51\u7edc\u3002\u672a\u8ba4\u8bc1\u90bb\u8fd1\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5c1d\u8bd5\u5728\u914d\u7f6e802.1x\u7684\u7aef\u53e3\u4e0a\u8fde\u63a5\u5230\u7f51\u7edc\u5229\u7528\u8be5\u6f0f\u6d1e\u95f4\u6b47\u6027\u83b7\u5f97\u7f51\u7edc\u8bbf\u95ee\u6743\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-c6500",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-34304",
  "openTime": "2020-06-23",
  "patchDescription": "Cisco Catalyst 6500 Series Switches\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u6b3e6500\u7cfb\u5217\u6a21\u5757\u5316\u673a\u7bb1\u4ea4\u6362\u673a\u3002Cisco IOS\u662f\u5176\u4e2d\u7684\u4e00\u5957\u4e3a\u5176\u7f51\u7edc\u8bbe\u5907\u5f00\u53d1\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nCisco Catalyst 6500 Series Switches Cisco IOS\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4e0d\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u4fbf\u53ef\u8bbf\u95ee\u7f51\u7edc\u3002\u672a\u8ba4\u8bc1\u90bb\u8fd1\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5c1d\u8bd5\u5728\u914d\u7f6e802.1x\u7684\u7aef\u53e3\u4e0a\u8fde\u63a5\u5230\u7f51\u7edc\u5229\u7528\u8be5\u6f0f\u6d1e\u95f4\u6b47\u6027\u83b7\u5f97\u7f51\u7edc\u8bbf\u95ee\u6743\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Catalyst 6500 Series Switches Cisco IOS\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Cisco Catalyst 6500 Series Switches"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-1758",
  "serverity": "\u4f4e",
  "submitTime": "2019-03-28",
  "title": "Cisco Catalyst 6500 Series Switches Cisco IOS\u6388\u6743\u95ee\u9898\u6f0f\u6d1e"
}

CVE-2019-1758 (GCVE-0-2019-1758)

Vulnerability from cvelistv5 – Published: 2019-03-28 00:20 – Updated: 2024-11-21 19:41

Title

Cisco IOS Software Catalyst 6500 Series 802.1x Authentication Bypass Vulnerability

Summary

A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could exploit this vulnerability by attempting to connect to the network on an 802.1x configured port. A successful exploit could allow the attacker to intermittently obtain access to the network.

Severity ?

4.7 (Medium)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

CWE

CWE-287

Assigner

cisco

References

URL

Tags

	https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO
	http://www.securityfocus.com/bid/107616	vdb-entryx_refsource_BID

Impacted products

	Vendor	Product	Version
	Cisco	Cisco IOS Software	Affected: 12.2(60)EZ12

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T18:28:42.825Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20190327 Cisco IOS Software Catalyst 6500 Series 802.1x Authentication Bypass Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-c6500"
          },
          {
            "name": "107616",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107616"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-1758",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-21T18:59:48.593791Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-21T19:41:33.000Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco IOS Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "12.2(60)EZ12"
            }
          ]
        }
      ],
      "datePublic": "2019-03-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could exploit this vulnerability by attempting to connect to the network on an 802.1x configured port. A successful exploit could allow the attacker to intermittently obtain access to the network."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-03-29T07:06:06",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20190327 Cisco IOS Software Catalyst 6500 Series 802.1x Authentication Bypass Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-c6500"
        },
        {
          "name": "107616",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107616"
        }
      ],
      "source": {
        "advisory": "cisco-sa-20190327-c6500",
        "defect": [
          [
            "CSCvk25074"
          ]
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco IOS Software Catalyst 6500 Series 802.1x Authentication Bypass Vulnerability",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2019-03-27T16:00:00-0700",
          "ID": "CVE-2019-1758",
          "STATE": "PUBLIC",
          "TITLE": "Cisco IOS Software Catalyst 6500 Series 802.1x Authentication Bypass Vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco IOS Software",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "12.2(60)EZ12"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could exploit this vulnerability by attempting to connect to the network on an 802.1x configured port. A successful exploit could allow the attacker to intermittently obtain access to the network."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
          }
        ],
        "impact": {
          "cvss": {
            "baseScore": "4.7",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-287"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20190327 Cisco IOS Software Catalyst 6500 Series 802.1x Authentication Bypass Vulnerability",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-c6500"
            },
            {
              "name": "107616",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107616"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-20190327-c6500",
          "defect": [
            [
              "CSCvk25074"
            ]
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2019-1758",
    "datePublished": "2019-03-28T00:20:14.474740Z",
    "dateReserved": "2018-12-06T00:00:00",
    "dateUpdated": "2024-11-21T19:41:33.000Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2020-34304

CVE-2019-1758 (GCVE-0-2019-1758)

Tags

Sightings

Nomenclature