Vulnerabilities > CVE-2019-1957 - Unspecified vulnerability in Cisco IOT Field Network Director

CVSS 7.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

low complexity

cisco

NVD

Published: 2019-08-08

Updated: 2020-10-16

Summary

A vulnerability in the web interface of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security (TLS) renegotiation requests. An attacker could exploit this vulnerability by sending renegotiation requests at a high rate. A successful exploit could increase the resource usage on the system, eventually leading to a DoS condition.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco IOT Field Network Director - Cisco IOT Field Network Director 4.1.0 Cisco IOT Field Network Director 4.1.1 Cisco IOT Field Network Director 4.1.2 Cisco IOT Field Network Director 4.1.3 Cisco IOT Field Network Director 4.2\(0.4\) Cisco IOT Field Network Director 4.2.0 Cisco IOT Field Network Director 4.3\(0.20\) Cisco IOT Field Network Director 4.3.0 Cisco IOT Field Network Director 4.3.2 Cisco IOT Field Network Director 4.4.0 Cisco IOT Field Network Director 4.4.1 Cisco IOT Field Network Director 4.4.2	13

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-fnd-dos