What is CVE-2019-1910?

CVE-2019-1910 is a high-severity vulnerability in Cisco Carrier_routing_system, classified under Improper Input Validation. CVSS score: 7.4/10. Published 2019-08-07.

How severe is CVE-2019-1910?

High severity. CVSS v3 base score is 7.4 out of 10.

Improper input validation in Cisco Carrier_routing_system

CVE-2019-1910

A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS–I…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.004 (36.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

Affected products

Cisco Carrier_routing_system — versions 7.0.1
Cisco Ios Xr Software — versions unspecified
Cisco Ios_xr

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2019-1910?: CVE-2019-1910 is a high-severity vulnerability in Cisco Carrier_routing_system, classified under Improper Input Validation. CVSS score: 7.4/10. Published 2019-08-07.
How severe is CVE-2019-1910?: High severity. CVSS v3 base score is 7.4 out of 10.