What is CVE-2019-12647?

CVE-2019-12647 is a high-severity vulnerability in Cisco 1100, classified under NULL Pointer Dereference. CVSS score: 7.5/10. Published 2019-09-25.

How severe is CVE-2019-12647?

High severity. CVSS v3 base score is 7.5 out of 10.

NULL pointer dereference in Cisco 1100

CVE-2019-12647

A vulnerability in the Ident protocol handler of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability exists because the affected software incorrectly handle…

EPSS: 0.020 (78.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Cisco 1100
Cisco 4221
Cisco 4321
Cisco 4351
Cisco 4431
Cisco 4451-x
Cisco Asr_1000
Cisco Asr_1001-hx
Cisco Asr_1001-x
Cisco Asr_1002-hx

Weakness classification (CWE)

CWE-476 — NULL Pointer Dereference

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2019-12647?: CVE-2019-12647 is a high-severity vulnerability in Cisco 1100, classified under NULL Pointer Dereference. CVSS score: 7.5/10. Published 2019-09-25.
How severe is CVE-2019-12647?: High severity. CVSS v3 base score is 7.5 out of 10.