What is CVE-2019-1957?

CVE-2019-1957 is a high-severity vulnerability in Cisco Iot Field Network Director (Iot-Fnd), classified under CWE-399. CVSS score: 7.5/10. Published 2019-08-08.

How severe is CVE-2019-1957?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Cisco Iot Field Network Director (Iot-Fnd)

CVE-2019-1957

A vulnerability in the web interface of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security (TLS) renegotiation requests. An attacker could exploit this vulnerability by sending renegotiation requests at a high rate. A successful exploit could increase the resource usage on the system, eventually leading to a DoS condition.

EPSS: 0.020 (79.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Cisco Iot Field Network Director (Iot-fnd) — versions unspecified
Cisco Iot_field_network_director

Weakness classification (CWE)

CWE-399

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2019-1957?: CVE-2019-1957 is a high-severity vulnerability in Cisco Iot Field Network Director (Iot-Fnd), classified under CWE-399. CVSS score: 7.5/10. Published 2019-08-08.
How severe is CVE-2019-1957?: High severity. CVSS v3 base score is 7.5 out of 10.