Vulnslist

find the latest Cisco vulnerabilities

Cisco IC3000 Industrial Compute Gateway Denial of Service Vulnerability

cisco-sa-20191002-ic3000-icg-dos · Medium · Published · Updated

A vulnerability in the web-based management interface of Cisco IC3000 Industrial Compute Gateway could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software improperly manages system resources. An attacker could exploit this vulnerability by opening a large number of simultaneous sessions on the web-based management interface of an affected device. A successful exploit could allow the attacker to cause a DoS condition of the web-based management interface, preventing normal management operations. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ic3000-icg-dos

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2019-12714
Cisco Bug IDsCSCvq92705
CVSS ScoreBase 6.5
Base 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:X/RL:X/RC:X
Product Names From Source
Cisco IC3000 Industrial Compute Gateway

Related Products

Product CVE Evidence
Cisco IC3000 Industrial Compute Gateway CVE-2019-12714 Cisco OpenVuln
Cisco 3000 Series Compute Gateway CVE-2019-12714 Cisco OpenVuln