| ID |
CVE-2019-1718
|
| Summary |
A vulnerability in the web interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of Secure Sockets Layer (SSL) renegotiation requests. An attacker could exploit this vulnerability by sending renegotiation requests at a high rate. An successful exploit could increase the resource usage on the system, eventually leading to a DoS condition. This vulnerability affects version 2.1. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 7.8 (as of 07-10-2020 - 19:02) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-noinfo |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
COMPLETE |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
| refmap
via4
|
| bid | 108030 | | cisco | 20190417 Cisco Identity Services Engine SSL Renegotiation Denial of Service Vulnerability |
|
| Last major update |
07-10-2020 - 19:02 |
| Published |
17-04-2019 - 22:29 |
| Last modified |
07-10-2020 - 19:02 |
