CVE-2019-1758

A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could exploit this vulnerability by attempting to connect to the network on an 802.1x configured port. A successful exploit could allow the attacker to intermittently obtain access to the network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.7 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
ciscoCNA
4.7 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
VendorProductVersion
ciscoios
12.2\(33\)sxj6
ciscoios
12.2\(33\)sxj7
ciscoios
12.2\(33\)sxj8
ciscoios
12.2\(33\)sxj9
ciscoios
12.2\(33\)sxj10
ciscoios
12.2\(60\)ez12
ciscoios
15.1\(1\)sy1
ciscoios
15.1\(1\)sy2
ciscoios
15.1\(1\)sy3
ciscoios
15.1\(1\)sy4
ciscoios
15.1\(1\)sy5
ciscoios
15.1\(1\)sy6
ciscoios
15.1\(2\)sg8a
ciscoios
15.1\(2\)sy
ciscoios
15.1\(2\)sy1
ciscoios
15.1\(2\)sy2
ciscoios
15.1\(2\)sy3
ciscoios
15.1\(2\)sy4
ciscoios
15.1\(2\)sy4a
ciscoios
15.1\(2\)sy5
ciscoios
15.1\(2\)sy6
ciscoios
15.1\(2\)sy7
ciscoios
15.1\(2\)sy8
ciscoios
15.1\(2\)sy9
ciscoios
15.1\(2\)sy10
ciscoios
15.1\(2\)sy11
ciscoios
15.1\(2\)sy12
ciscoios
15.1\(2\)sy13
ciscoios
15.1\(3\)svg3d
ciscoios
15.1\(3\)svi1b
ciscoios
15.1\(3\)svk4b
ciscoios
15.1\(3\)svk4c
ciscoios
15.1\(3\)svm3
ciscoios
15.1\(3\)svn2
ciscoios
15.1\(3\)svo1
ciscoios
15.1\(3\)svo2
ciscoios
15.1\(3\)svp1
ciscoios
15.1\(3\)svp2
ciscoios
15.1\(4\)m12c
ciscoios
15.2\(1\)sy
ciscoios
15.2\(1\)sy0a
ciscoios
15.2\(1\)sy1
ciscoios
15.2\(1\)sy1a
ciscoios
15.2\(1\)sy2
ciscoios
15.2\(1\)sy3
ciscoios
15.2\(1\)sy4
ciscoios
15.2\(1\)sy5
ciscoios
15.2\(1\)sy6
ciscoios
15.2\(1\)sy7
ciscoios
15.2\(2\)sy
ciscoios
15.2\(2\)sy1
ciscoios
15.2\(2\)sy2
ciscoios
15.2\(2\)sy3
ciscoios
15.2\(3\)ea1
ciscoios
15.2\(4\)jn1
ciscoios
15.2\(4a\)ea5
ciscoios
15.3\(0\)sy
ciscoios
15.3\(1\)sy
ciscoios
15.3\(1\)sy1
ciscoios
15.3\(1\)sy2
ciscoios
15.3\(3\)ja1n
ciscoios
15.3\(3\)jf35
ciscoios
15.3\(3\)ji2
ciscoios
15.4\(1\)sy
ciscoios
15.4\(1\)sy1
ciscoios
15.4\(1\)sy2
ciscoios
15.4\(1\)sy3
ciscoios
15.4\(1\)sy4
ciscoios
15.5\(1\)sy
ciscoios
15.5\(1\)sy1
ciscoios
15.5\(1\)sy2
ciscoios
15.6\(2\)sp3b
𝑥
= Vulnerable software versions