| code | #TRUSTED 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
#
# (C) Tenable Network Security, Inc.
#
include('compat.inc');
if (description)
{
script_id(129733);
script_version("1.6");
script_cvs_date("Date: 2019/12/20");
script_cve_id("CVE-2019-12656");
script_xref(name:"CISCO-BUG-ID", value:"CSCvo19668");
script_xref(name:"CISCO-BUG-ID", value:"CSCvo42730");
script_xref(name:"CISCO-BUG-ID", value:"CSCvp28143");
script_xref(name:"CISCO-BUG-ID", value:"CSCvp28178");
script_xref(name:"CISCO-BUG-ID", value:"CSCvq86542");
script_xref(name:"CISCO-SA", value:"cisco-sa-20190925-iox");
script_xref(name:"IAVA", value:"2019-A-0354");
script_name(english:"Cisco IOx Application Environment DoS Vulnerability (cisco-sa-20190925-iox)");
script_set_attribute(attribute:"synopsis", value:
"The remote device is missing a vendor-supplied security patch");
script_set_attribute(attribute:"description", value:
"According to its self-reported version, IOS is affected by a denial of service vulnerability in the IOx application
environment of multiple Cisco platforms. This is due to a Transport Layer Security (TLS) implementation issue. A remote
attacker can exploit this by sending specially crafted TLS packets to the IOx web server on an affected device, causing
the IOx web server to stop processing HTTPS requests.
Please see the included Cisco BIDs and Cisco Security Advisory for more information.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
# https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iox
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?bfca13f5");
script_set_attribute(attribute:"see_also", value:"http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-72547");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvo19668");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvo42730");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvp28143");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvp28178");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvq86542");
script_set_attribute(attribute:"solution", value:
"Upgrade to the relevant fixed version referenced in Cisco bug IDs CSCvo19668, CSCvo42730, CSCvp28143, CSCvp28178, or
CSCvq86542");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-12656");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"vuln_publication_date", value:"2019/09/25");
script_set_attribute(attribute:"patch_publication_date", value:"2019/09/25");
script_set_attribute(attribute:"plugin_publication_date", value:"2019/10/09");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:ios");
script_set_attribute(attribute:"stig_severity", value:"I");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"CISCO");
script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("cisco_ios_version.nasl");
script_require_keys("Host/Cisco/IOS/Version", "Host/Cisco/IOS/Model");
exit(0);
}
include('audit.inc');
include('cisco_workarounds.inc');
include('ccf.inc');
product_info = cisco::get_product_info(name:'Cisco IOS');
model = product_info.model;
bug_ids = 'CSCvo19668, CSCvo42730, CSCvp28143, CSCvp28178, CSCvq86542';
if (model !~ '^IC3000([^0-9]|$)' &&
model !~ 'IR510([^0-9]|$)' &&
model !~ 'CGR.*[^0-9]1[0-9]{3}([^0-9]|$)' &&
'IE-4000-' >!< model
)
audit(AUDIT_HOST_NOT, 'affected');
version_list=make_list(
'15.2(5)E1',
'15.2(5)E2',
'15.2(5)E2b',
'15.2(5)E2c',
'15.2(6)E',
'15.2(6)E0a',
'15.2(6)E0c',
'15.2(6)E1',
'15.2(6)E1a',
'15.2(6)E1s',
'15.2(6)E2a',
'15.2(6)E3'
);
if (model !~ 'IR510([^0-9]|$)')
{
workarounds = make_list(CISCO_WORKAROUNDS['no_workaround']);
reporting = make_array(
'port' , 0,
'severity' , SECURITY_WARNING,
'version' , product_info['version'],
'bug_id' , bug_ids
);
}
else
{
workarounds = make_list(CISCO_WORKAROUNDS['monit_summary']);
reporting = make_array(
'port' , 0,
'severity' , SECURITY_WARNING,
'version' , product_info['version'],
'bug_id' , bug_ids,
'cmds' , make_list('monit summary')
);
}
workaround_params = make_list();
cisco::check_and_report(product_info:product_info, workarounds:workarounds, workaround_params:workaround_params, reporting:reporting, vuln_versions:version_list);
|