CVE-2019-1751

HIGH

Cisco IOS - Unauthenticated Denial of Service via NAT64 IPv4 Packet Handling

Title source: llm
STIX 2.1

Description

A vulnerability in the Network Address Translation 64 (NAT64) functions of Cisco IOS Software could allow an unauthenticated, remote attacker to cause either an interface queue wedge or a device reload. The vulnerability is due to the incorrect handling of certain IPv4 packet streams that are sent through the device. An attacker could exploit this vulnerability by sending specific IPv4 packet streams through the device. An exploit could allow the attacker to either cause an interface queue wedge or a device reload, resulting in a denial of service (DoS) condition.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/107601

Scores

CVSS v3 8.6
EPSS 0.0252
EPSS Percentile 82.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-20
Status published
Products (50)
cisco/ios 15.4\(1\)cg1
cisco/ios 15.4\(1\)t
cisco/ios 15.4\(1\)t1
cisco/ios 15.4\(1\)t2
cisco/ios 15.4\(1\)t3
cisco/ios 15.4\(1\)t4
cisco/ios 15.4\(2\)t
cisco/ios 15.4\(2\)t1
cisco/ios 15.4\(2\)t2
cisco/ios 15.4\(2\)t3
... and 40 more
Published Mar 28, 2019
Tracked Since Feb 18, 2026