Auth bypass in Cisco 4221 Integrated Services Router
CVE-2019-12643
A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on the managed Cisco IOS XE device. The vulnerability is due to an improper check performed by the area of code that manages the REST API authentication service. An attacker could exploit this vulnerability by submitting malicious HTTP requests to the targeted device. A successful exploit could allow the attacker to obtain the token-id of an authenticated user. This token-id could be used to bypass authentication and execute privileged actions through the interface of the REST API virtual service container on the affected Cisco IOS XE device. The REST API interface is not enabled by default and must be installed and activated separately on IOS XE devices. See the Details section for more information.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.053 (92.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 93rd percentile — 92.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.053 · newest: 0.053 · change: 0.000
Affected products
- Cisco 4221 Integrated Services Router
- Cisco 4321 Integrated Services Router
- Cisco 4331 Integrated Services Router
- Cisco 4351 Integrated Services Router
- Cisco 4431 Integrated Services Router
- Cisco 4451-X Integrated Services Router
- Cisco iOS Xe Software — versions unspecified
- Cisco Cloud Services Router 1000v
- Cisco iOS Xe — versions 15.5\(3\)s3.16, 15.5(3)s3.16, 16.6.5
Weakness classification (CWE)
Public proof-of-concept exploits
References
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828… (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-12643?
- CVE-2019-12643 is a critical-severity vulnerability in Cisco 4221 Integrated Services Router, classified under Improper Authentication. CVSS score: 10.0/10. Published 2019-08-28.
- How severe is CVE-2019-12643?
- Critical severity. CVSS v3 base score is 10.0 out of 10.
- Is CVE-2019-12643 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.