CVE-2019-1759 Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability

Medium 5.3 Published 28 Mar 2019 Updated 19 Nov 2024

Unauthenticated remote attackers can bypass ACLs on the Gigabit Ethernet Management interface to reach configured IP addresses.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-1759?

CVE-2019-1759 is a medium-severity authentication bypass vulnerability in Cisco Ios Xe, published on 28 Mar 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface. The vulnerability is due to a logic error that was introduced in the Cisco IOS XE Software 16.1.1 Release, which prevents the ACL from working when applied against the management interface. An attacker could exploit this issue by attempting to access the device via the management interface.

Weakness: CWE-287, CWE-284

Which versions are affected by CVE-2019-1759?

It affects 1 product.

Products include Cisco Ios Xe.

How do I fix CVE-2019-1759?

No fix has been published for CVE-2019-1759 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2019-1759 being exploited?

There is no known exploitation of CVE-2019-1759 in the wild and no public exploit code.

Public exploit code: 1 proofs of concept on GitHub.

All Cisco Ios Xe vulnerabilities

Sources

Also known as GHSA-4pjp-5725-8mxh.