What is CVE-2019-12664?

CVE-2019-12664 is a high-severity vulnerability in Cisco 4321_integrated_services_router, classified under Information Disclosure. CVSS score: 7.5/10. Published 2019-09-25.

How severe is CVE-2019-12664?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Cisco 4321_integrated_services_router

CVE-2019-12664

A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers (ISRs) could allow an unauthenticated, adjacent attacker to pass IPv4 traffic through an ISDN c…

Vulnerability class: Information Disclosure

EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Cisco 4321_integrated_services_router
Cisco 4331_integrated_services_router
Cisco 4351_integrated_services_router
Cisco Ios Xe Software — versions unspecified
Cisco Ios_xe — versions 16.6.4

Weakness classification (CWE)

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2019-12664?: CVE-2019-12664 is a high-severity vulnerability in Cisco 4321_integrated_services_router, classified under Information Disclosure. CVSS score: 7.5/10. Published 2019-09-25.
How severe is CVE-2019-12664?: High severity. CVSS v3 base score is 7.5 out of 10.