CVE-2019-1840

{"id": "CVE-2019-1840", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2019-04-18T02:29:06.060", "references": [{"url": "http://www.securityfocus.com/bid/108033", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-pnr-dos", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securityfocus.com/bid/108033", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-pnr-dos", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-665"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-665"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the DHCPv6 input packet processor of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to restart the server and cause a denial of service (DoS) condition on the affected system. The vulnerability is due to incomplete user-supplied input validation when a custom extension attempts to change a DHCPv6 packet received by the application. An attacker could exploit this vulnerability by sending malformed DHCPv6 packets to the application. An exploit could allow the attacker to trigger a restart of the service which, if exploited repeatedly, might lead to a DoS condition. This vulnerability can only be exploited if the administrator of the server has previously installed custom extensions that attempt to modify the packet details before the packet has been processed. Note: Although the CVSS score matches a High SIR, this has been lowered to Medium because this condition will only affect an application that has customer-developed extensions that will attempt to modify packet parameters before the packet has been completely sanitized. If packet modification in a custom extension happens after the packet has been sanitized, the application will not be affected by this vulnerability. Software versions prior to 8.3(7) and 9.1(2) are affected."}, {"lang": "es", "value": "Una vulnerabilidad en el procesador de paquetes de entrada DHCPv6 de Prime Network Registrar de Cisco, podr\u00eda permitir que un atacante remoto no autenticado reinicie el servidor y cause una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en el sistema afectado. La vulnerabilidad es debido a una validaci\u00f3n de entrada incompleta proporcionada por el usuario cuando una extensi\u00f3n personalizada intenta cambiar un paquete DHCPv6 recibido por la aplicaci\u00f3n. Un atacante podr\u00eda explotar esta vulnerabilidad al enviar paquetes DHCPv6 malformados a la aplicaci\u00f3n. Una explotaci\u00f3n podr\u00eda permitir que el atacante inicie un reinicio del servicio que, si se explota repetidamente, podr\u00eda llevar a una condici\u00f3n DoS. Esta vulnerabilidad solo puede ser explotada si el administrador del servidor ha instalado previamente extensiones personalizadas que intentan modificar los detalles del paquete antes de que el paquete haya sido procesado. Nota: Aunque la puntuaci\u00f3n CVSS coincide con un SIR alto, se ha reducido a Medio porque esta condici\u00f3n s\u00f3lo afectar\u00e1 a una aplicaci\u00f3n que tenga extensiones desarrolladas por el cliente que intentar\u00e1n modificar los par\u00e1metros del paquete antes de que el paquete haya sido completamente saneado. Si la modificaci\u00f3n del paquete en una extensi\u00f3n personalizada ocurre despu\u00e9s de que el paquete haya sido saneado, la aplicaci\u00f3n no se ver\u00e1 afectada por esta vulnerabilidad. Las versiones de software anteriores a 8.3 (7) y 9.1 (2) est\u00e1n afectadas."}], "lastModified": "2024-11-21T04:37:30.500", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:prime_network_registrar:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9822E11-767C-4D1E-90A9-F3D5B0E79A05", "versionEndExcluding": "8.3.7"}, {"criteria": "cpe:2.3:a:cisco:prime_network_registrar:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C395D9E4-E1DA-405F-9E87-D547445A5E98", "versionEndExcluding": "9.1.2", "versionStartIncluding": "9.0"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}