Resource exhaustion in Cisco Ios

CVE-1999-0159

Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11.x releases.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.011 (61.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L.

Affected products

  • Cisco Ios — versions 9.1, 11.0\(20.3\), 11.1\(15\)ca
  • N/a — versions n/a

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-1999-0159?
CVE-1999-0159 is a low-severity vulnerability in Cisco Ios, classified under Uncontrolled Resource Consumption. CVSS score: 3.5/10. Published 1998-08-12.
How severe is CVE-1999-0159?
Low severity. CVSS v3 base score is 3.5 out of 10.