From d95c58a35eb7ded938aec777e407a4b80940f7b1 Mon Sep 17 00:00:00 2001 From: santosomar Date: Thu, 28 Mar 2019 00:16:29 +0000 Subject: [PATCH] Adding Cisco CVE-2019-1757 --- 2019/1xxx/CVE-2019-1757.json | 509 ++++++++++++++++++++++++++++++++++- 1 file changed, 505 insertions(+), 4 deletions(-) diff --git a/2019/1xxx/CVE-2019-1757.json b/2019/1xxx/CVE-2019-1757.json index 681735d4e7b..69549fcc4d6 100644 --- a/2019/1xxx/CVE-2019-1757.json +++ b/2019/1xxx/CVE-2019-1757.json @@ -1,8 +1,466 @@ { "CVE_data_meta": { - "ASSIGNER": "cve@mitre.org", + "ASSIGNER": "psirt@cisco.com", + "DATE_PUBLIC": "2019-03-27T16:00:00-0700", "ID": "CVE-2019-1757", - "STATE": "RESERVED" + "STATE": "PUBLIC", + "TITLE": "Cisco IOS and IOS XE Software Smart Call Home Certificate Validation Vulnerability" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "Cisco IOS and IOS XE Software", + "version": { + "version_data": [ + { + "version_affected": "=", + "version_value": "3.6.4E" + }, + { + "version_affected": "=", + "version_value": "3.6.5E" + }, + { + "version_affected": "=", + "version_value": "3.6.6E" + }, + { + "version_affected": "=", + "version_value": "3.6.5aE" + }, + { + "version_affected": "=", + "version_value": "3.6.5bE" + }, + { + "version_affected": "=", + "version_value": "3.6.7E" + }, + { + "version_affected": "=", + "version_value": "3.6.8E" + }, + { + "version_affected": "=", + "version_value": "3.6.7aE" + }, + { + "version_affected": "=", + "version_value": "3.6.7bE" + }, + { + "version_affected": "=", + "version_value": "3.7.4E" + }, + { + "version_affected": "=", + "version_value": "3.7.5E" + }, + { + "version_affected": "=", + "version_value": "3.16.1S" + }, + { + "version_affected": "=", + "version_value": "3.16.1aS" + }, + { + "version_affected": "=", + "version_value": "3.16.2S" + }, + { + "version_affected": "=", + "version_value": "3.16.2aS" + }, + { + "version_affected": "=", + "version_value": "3.16.3S" + }, + { + "version_affected": "=", + "version_value": "3.16.2bS" + }, + { + "version_affected": "=", + "version_value": "3.16.3aS" + }, + { + "version_affected": "=", + "version_value": "3.16.4S" + }, + { + "version_affected": "=", + "version_value": "3.16.4aS" + }, + { + "version_affected": "=", + "version_value": "3.16.4bS" + }, + { + "version_affected": "=", + "version_value": "3.16.4gS" + }, + { + "version_affected": "=", + "version_value": "3.16.5S" + }, + { + "version_affected": "=", + "version_value": "3.16.4cS" + }, + { + "version_affected": "=", + "version_value": "3.16.4dS" + }, + { + "version_affected": "=", + "version_value": "3.16.4eS" + }, + { + "version_affected": "=", + "version_value": "3.16.6S" + }, + { + "version_affected": "=", + "version_value": "3.16.5aS" + }, + { + "version_affected": "=", + "version_value": "3.16.5bS" + }, + { + "version_affected": "=", + "version_value": "3.16.7S" + }, + { + "version_affected": "=", + "version_value": "3.16.6bS" + }, + { + "version_affected": "=", + "version_value": "3.16.7aS" + }, + { + "version_affected": "=", + "version_value": "3.16.7bS" + }, + { + "version_affected": "=", + "version_value": "3.17.0S" + }, + { + "version_affected": "=", + "version_value": "3.17.1S" + }, + { + "version_affected": "=", + "version_value": "3.17.2S" + }, + { + "version_affected": "=", + "version_value": "3.17.1aS" + }, + { + "version_affected": "=", + "version_value": "3.17.3S" + }, + { + "version_affected": "=", + "version_value": "3.17.4S" + }, + { + "version_affected": "=", + "version_value": "16.2.1" + }, + { + "version_affected": "=", + "version_value": "16.2.2" + }, + { + "version_affected": "=", + "version_value": "3.8.2E" + }, + { + "version_affected": "=", + "version_value": "3.8.3E" + }, + { + "version_affected": "=", + "version_value": "3.8.4E" + }, + { + "version_affected": "=", + "version_value": "3.8.5E" + }, + { + "version_affected": "=", + "version_value": "3.8.5aE" + }, + { + "version_affected": "=", + "version_value": "3.8.6E" + }, + { + "version_affected": "=", + "version_value": "16.3.1" + }, + { + "version_affected": "=", + "version_value": "16.3.2" + }, + { + "version_affected": "=", + "version_value": "16.3.3" + }, + { + "version_affected": "=", + "version_value": "16.3.1a" + }, + { + "version_affected": "=", + "version_value": "16.3.4" + }, + { + "version_affected": "=", + "version_value": "16.3.5" + }, + { + "version_affected": "=", + "version_value": "16.3.5b" + }, + { + "version_affected": "=", + "version_value": "16.3.6" + }, + { + "version_affected": "=", + "version_value": "16.4.1" + }, + { + "version_affected": "=", + "version_value": "16.4.2" + }, + { + "version_affected": "=", + "version_value": "16.4.3" + }, + { + "version_affected": "=", + "version_value": "16.5.1" + }, + { + "version_affected": "=", + "version_value": "16.5.1a" + }, + { + "version_affected": "=", + "version_value": "16.5.1b" + }, + { + "version_affected": "=", + "version_value": "16.5.2" + }, + { + "version_affected": "=", + "version_value": "16.5.3" + }, + { + "version_affected": "=", + "version_value": "3.18.0aS" + }, + { + "version_affected": "=", + "version_value": "3.18.0S" + }, + { + "version_affected": "=", + "version_value": "3.18.1S" + }, + { + "version_affected": "=", + "version_value": "3.18.2S" + }, + { + "version_affected": "=", + "version_value": "3.18.3S" + }, + { + "version_affected": "=", + "version_value": "3.18.4S" + }, + { + "version_affected": "=", + "version_value": "3.18.0SP" + }, + { + "version_affected": "=", + "version_value": "3.18.1SP" + }, + { + "version_affected": "=", + "version_value": "3.18.1aSP" + }, + { + "version_affected": "=", + "version_value": "3.18.1gSP" + }, + { + "version_affected": "=", + "version_value": "3.18.1bSP" + }, + { + "version_affected": "=", + "version_value": "3.18.1cSP" + }, + { + "version_affected": "=", + "version_value": "3.18.2SP" + }, + { + "version_affected": "=", + "version_value": "3.18.1hSP" + }, + { + "version_affected": "=", + "version_value": "3.18.2aSP" + }, + { + "version_affected": "=", + "version_value": "3.18.1iSP" + }, + { + "version_affected": "=", + "version_value": "3.18.3SP" + }, + { + "version_affected": "=", + "version_value": "3.18.4SP" + }, + { + "version_affected": "=", + "version_value": "3.18.3aSP" + }, + { + "version_affected": "=", + "version_value": "3.18.3bSP" + }, + { + "version_affected": "=", + "version_value": "3.9.0E" + }, + { + "version_affected": "=", + "version_value": "3.9.1E" + }, + { + "version_affected": "=", + "version_value": "3.9.2E" + }, + { + "version_affected": "=", + "version_value": "3.9.2bE" + }, + { + "version_affected": "=", + "version_value": "16.6.1" + }, + { + "version_affected": "=", + "version_value": "16.6.2" + }, + { + "version_affected": "=", + "version_value": "16.6.3" + }, + { + "version_affected": "=", + "version_value": "16.7.1" + }, + { + "version_affected": "=", + "version_value": "16.7.1a" + }, + { + "version_affected": "=", + "version_value": "16.7.1b" + }, + { + "version_affected": "=", + "version_value": "16.7.2" + }, + { + "version_affected": "=", + "version_value": "16.8.1" + }, + { + "version_affected": "=", + "version_value": "16.8.1a" + }, + { + "version_affected": "=", + "version_value": "16.8.1b" + }, + { + "version_affected": "=", + "version_value": "16.8.1s" + }, + { + "version_affected": "=", + "version_value": "16.8.1c" + }, + { + "version_affected": "=", + "version_value": "16.8.1d" + }, + { + "version_affected": "=", + "version_value": "16.8.2" + }, + { + "version_affected": "=", + "version_value": "16.9.1b" + }, + { + "version_affected": "=", + "version_value": "16.9.1s" + }, + { + "version_affected": "=", + "version_value": "16.9.1c" + }, + { + "version_affected": "=", + "version_value": "3.10.0E" + }, + { + "version_affected": "=", + "version_value": "3.10.1E" + }, + { + "version_affected": "=", + "version_value": "3.10.0cE" + }, + { + "version_affected": "=", + "version_value": "3.10.1aE" + }, + { + "version_affected": "=", + "version_value": "3.10.1sE" + } + ] + } + } + ] + }, + "vendor_name": "Cisco" + } + ] + } }, "data_format": "MITRE", "data_type": "CVE", @@ -11,8 +469,51 @@ "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software. " } ] + }, + "exploit": [ + { + "lang": "eng", + "value": "" + } + ], + "impact": { + "cvss": { + "baseScore": "5.9", + "vectorString": "", + "version": "3.0" + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-295" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "name": "20190327 Cisco IOS and IOS XE Software Smart Call Home Certificate Validation Vulnerability", + "refsource": "CISCO", + "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-call-home-cert" + } + ] + }, + "source": { + "advisory": "cisco-sa-20190327-call-home-cert", + "defect": [ + [ + "CSCvg83741" + ] + ], + "discovery": "INTERNAL" } -} \ No newline at end of file +}