NULL pointer dereference in Cisco Ios
CVE-2019-12647
A vulnerability in the Ident protocol handler of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability exists because the affected software incorrectly handle…
EPSS: 0.010 (77.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.
Affected products
- Cisco Ios — versions unspecified
Weakness classification (CWE)
References
- 20190925 Cisco IOS and IOS XE Software IP Ident Denial of Service Vulnerability (vendor-advisory, x_refsource_CISCO)
Frequently asked questions
- What is CVE-2019-12647?
- CVE-2019-12647 is a high-severity vulnerability in Cisco Ios, classified under NULL Pointer Dereference. CVSS score: 8.6/10. Published 2019-09-25.
- How severe is CVE-2019-12647?
- High severity. CVSS v3 base score is 8.6 out of 10.