Vulnerability in Cisco Asr_9000
CVE-2019-16019
Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vu…
EPSS: 0.013 (66.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.
Affected products
- Cisco Asr_9000
- Cisco Asr_9010
- Cisco Asr_9904
- Cisco Asr_9910
- Cisco Asr_9912
- Cisco Asr_9922
- Cisco Carrier_routing_system
- Cisco Ios Xr Software — versions n/a
- Cisco Ios_xr — versions 6.6.1, 6.6.2, 6.6.25
- Cisco Ios_xrv_9000
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-16019?
- CVE-2019-16019 is a high-severity vulnerability in Cisco Asr_9000, classified under CWE-399. CVSS score: 8.6/10. Published 2020-09-23.
- How severe is CVE-2019-16019?
- High severity. CVSS v3 base score is 8.6 out of 10.