CVE-2019-1761CWE-665

Cisco IOS and IOS XE Software Hot Standby Router Protocol Information Leak Vulnerability

Medium · published March 28, 2019

CVSS v3.0
4.3
EPSS
1%
Percentile
49.6
In the wild
Unconfirmed
What it is

A vulnerability in the Hot Standby Router Protocol (HSRP) subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to receive potentially sensitive information from an affected device. The vulnerability is due to insufficient memory initialization. An attacker could exploit this vulnerability by receiving HSRPv2 traffic from an adjacent HSRP member. A successful exploit could allow the attacker to receive potentially sensitive information from the adjacent device.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00631 · 49.6th percentile
Weakness
CWE-665 · Improper Initialization
Published
2019-03-28T00:25Z
EPSS history
Timeline
  • 28 MAR 00:25Z
    Cisco IOS and IOS XE Software Hot Standby Router Protocol Information Leak Vulnerability
    cvelistv5