Skip to content
OpenAdvisories
Medium · 5.3 CVE-2019-12659 EUVD-2019-4250GHSA-mm2h-7gr4-522f

Cisco IOS XE Software HTTP Server Denial of Service Vulnerability

Published Sep 25, 2019 · Updated Nov 19, 2024 · Assigned by cisco

Description

A vulnerability in the HTTP server code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the HTTP server to crash. The vulnerability is due to a logical error in the logging mechanism. An attacker could exploit this vulnerability by generating a high amount of long-lived connections to the HTTP service on the device. A successful exploit could allow the attacker to cause the HTTP server to crash.

Affected products

VendorProductAffectedFixed
Cisco Cisco IOS XE Software 3.2.0JA unspecified – < n/a n/a

References