CVE-2019-12655

highPriorität · verfolgen · 31EPSS 0.020 · 80. PerzentilEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.97% (80th) EPSS

CVSS 7.8 · high

Is it mine?

38 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisco_csaf

EPSS · bewertet 2026-10-27

A vulnerability in the FTP application layer gateway (ALG) functionality used by Network Address Translation (NAT), NAT IPv6 to IPv4 (NAT64), and the Zone-Based Policy Firewall (ZBFW) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a buffer overflow that occurs when an affected device inspects certain FTP traffic. An attacker could exploit this vulnerability by performing a specific FTP transfer through the device. A successful exploit could allow the attacker to cause the device to reload.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behoben16.10.1cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.10.1acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.10.1bcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.10.1ccisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.10.1dcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.10.1ecisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.10.1scisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.3.7cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.6.4cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.6.4acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.6.4scisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.6.5cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.6.5acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.6.5bcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.9.1cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.9.1acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.9.1bcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.9.1ccisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.9.1dcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.9.1scisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.9.2cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.9.2acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.9.2scisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben17.11.99SWcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.16.8Scisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben3.16.9Scisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.6

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–8.6

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.08.6highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · ENISA EU

v3.08.6highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · psirt@cisco.com USAusnutzbarkeit 3.9 · Auswirkung 4

v3.08.6highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · Cisco PSIRT US

v3.18.6highAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-120USprimärCWE-20USCWE-20US

betroffene Produkte (38)

Betroffene Produkte und Versionsbereiche.

Cisco 16.10.1alle Versionencisco_csafUS
Cisco 16.10.1aalle Versionencisco_csafUS
Cisco 16.10.1balle Versionencisco_csafUS
Cisco 16.10.1calle Versionencisco_csafUS
Cisco 16.10.1dalle Versionencisco_csafUS
Cisco 16.10.1ealle Versionencisco_csafUS
Cisco 16.10.1salle Versionencisco_csafUS
Cisco 16.3.7alle Versionencisco_csafUS
Cisco 16.6.4alle Versionencisco_csafUS
Cisco 16.6.4aalle Versionencisco_csafUS
Cisco 16.6.4salle Versionencisco_csafUS
Cisco 16.6.5alle Versionencisco_csafUS
Cisco 16.6.5aalle Versionencisco_csafUS
Cisco 16.6.5balle Versionencisco_csafUS
Cisco 16.9.1alle Versionencisco_csafUS
Cisco 16.9.1aalle Versionencisco_csafUS
Cisco 16.9.1balle Versionencisco_csafUS
Cisco 16.9.1calle Versionencisco_csafUS
Cisco 16.9.1dalle Versionencisco_csafUS
Cisco 16.9.1salle Versionencisco_csafUS

20 von 38 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

cisco-sa-20190925-ftpCisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service Vulnerability2019-09-25csaf · cisco_csafUS
A vulnerability in the FTP application layer gateway (ALG) functionality used by Network Address Translation (NAT), NAT IPv6 to IPv4 (NAT64), and the Zone-Based Policy Firewall (ZBFW) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a buffer overflow that occurs when an affected device inspects certain FTP traffic. An attacker could exploit this vulnerability by performing a specific FTP transfer through the device. A successful exploit could allow the attacker to cause the device to reload. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-ftp ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-ftp"] This advisory is part of the September 25, 2019, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 12 Cisco Security Advisories that describe 13 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: September 2019 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-72547"].

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisco_csaf NVD CVE.org MITRE

veröffentlicht 2019-09-25geändert 2026-06-17

verwandt (5,668)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-43520US	medium5.5OT kritisch	0.43% (37th)	KEV	2025-12-12
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS So…
CVE-2025-20333US	—OT kritisch	71.2% (99th)	KEV	2025-09-25
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an aut…
CVE-2025-39682US	critical9.8OT kritisch	3.25% (88th)	KEV	2025-09-05
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contig…
CVE-2025-31277US	—OT kritisch	1.66% (77th)	KEV	2025-07-30
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Proc…
CVE-2025-24985US	—OT kritisch	3.89% (90th)	KEV	2025-03-11
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

+5663 weitere

Referenzen (22)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan