CVE-2019-12649

A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability exists because, under certain circumstances, an affected device can be configured to not verify the digital signatures of system image files during the boot process. An attacker could exploit this vulnerability by abusing a specific feature that is part of the device boot process. A successful exploit could allow the attacker to install and boot a malicious software image or execute unsigned binaries on the targeted device.

CVSS v3 6.7 MEDIUM
CVSS v2.0 7.2 HIGH

6.7^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-digsig-bypass	Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-digsig-bypass	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:cisco:ios_xe:16.8\(1\):*:*:*:*:*:*:*

OR	cpe:2.3:h:cisco:catalyst_3850-12s-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-12s-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-12xs-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-12xs-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-16xs-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-16xs-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24p-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24p-l:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24p-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24pw-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24s-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24s-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24t-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24t-l:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24t-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24u-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24u-l:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24u-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24xs-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24xs-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24xu-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24xu-l:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-24xu-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-32xs-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-32xs-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48f-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48f-l:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48f-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48p-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48p-l:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48p-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48pw-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48t-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48t-l:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48t-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48u-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48u-l:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48u-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48xs-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48xs-f-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48xs-f-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_3850-48xs-s:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-24p-a:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-24p-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-24s-a:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-24s-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-24t-a:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-24t-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-24u-a:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-24u-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-24ux-a:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-24ux-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-48p-a:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-48p-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-48s-a:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-48s-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-48t-a:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-48t-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-48u-a:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-48u-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-48un-a:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-48un-e:-:::::::*
	cpe:2.3:h:cisco:catalyst_9300-48uxm-a:-:::::::*
cpe:2.3:h:cisco:catalyst_9300-48uxm-e:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-24p-4g-a:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-24p-4g-e:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-24p-4x-a:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-24p-4x-e:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-24t-4g-a:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-24t-4g-e:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-24t-4x-a:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-24t-4x-e:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-48p-4g-a:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-48p-4g-e:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-48p-4x-a:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-48p-4x-e:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-48t-4g-a:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-48t-4g-e:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-48t-4x-a:-:::::::*
cpe:2.3:h:cisco:catalyst_9300l-48t-4x-e:-:::::::*
cpe:2.3:h:cisco:catalyst_c3850-12x48u-e:-:::::::*
cpe:2.3:h:cisco:catalyst_c3850-12x48u-l:-:::::::*
cpe:2.3:h:cisco:catalyst_c3850-12x48u-s:-:::::::*

Configuration 2 (hide)

cpe:2.3:o:cisco:ios:16.9.1:*:*:*:*:*:*:*

History

21 Nov 2024, 04:23

Type	Values Removed	Values Added
References	~~() https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-digsig-bypass - Vendor Advisory~~	() https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-digsig-bypass - Vendor Advisory

Information

Published : 2019-09-25 20:15

Updated : 2024-11-21 04:23

NVD link : CVE-2019-12649

Mitre link : CVE-2019-12649

CVE.ORG link : CVE-2019-12649

JSON object : View

Products Affected

cisco

catalyst_3850-16xs-s
catalyst_3850-12xs-e
catalyst_3850-48u-s
catalyst_9300-24ux-e
catalyst_9300l-24p-4x-a
catalyst_3850-16xs-e
catalyst_3850-24xu-l
catalyst_9300l-48t-4x-a
catalyst_9300
catalyst_3850-12xs-s
catalyst_9300l-48p-4g-a
catalyst_3850-12s-s
catalyst_3850-24xu-e
catalyst_9300-48uxm-e
ios_xe
catalyst_9300l-24t-4g-e
catalyst_9300l-24p-4x-e
catalyst_3850-48p-s
catalyst_9300l-24p-4g-e
catalyst_3850-12s-e
catalyst_9300-24t-a
catalyst_3850-48f-e
catalyst_9300l-48p-4x-e
catalyst_9300-48t-e
catalyst_9300-24s-e
catalyst_3850-48xs-f-s
catalyst_3850-48xs-f-e
ios
catalyst_3850-24xs-e
catalyst_3850-48t-s
catalyst_3850-24pw-s
catalyst_3850-48t-l
catalyst_9300l-48t-4x-e
catalyst_3850-24t-s
catalyst_9300-48u-e
catalyst_3850-24t-l
catalyst_c3850-12x48u-s
catalyst_3850-24p-l
catalyst_9300l-48p-4x-a
catalyst_9300l-24t-4x-e
catalyst_3850-24p-e
catalyst_3850-48xs-s
catalyst_9300-24p-e
catalyst_3850-48pw-s
catalyst_3850-24xu-s
catalyst_9300l-48t-4g-e
catalyst_9300-48s-e
catalyst_9300-48t-a
catalyst_3850-24s-e
catalyst_3850-48t-e
catalyst_3850-32xs-e
catalyst_c3850-12x48u-e
catalyst_3850-24t-e
catalyst_c3850-12x48u-l
catalyst_3850-48p-l
catalyst_3850-48u-e
catalyst_9300l-24p-4g-a
catalyst_3850-48f-l
catalyst_9300-48p-a
catalyst_3850-24u-s
catalyst_9300l-24t-4g-a
catalyst_9300-24ux-a
catalyst_9300l
catalyst_9300l-24t-4x-a
catalyst_9300-24t-e
catalyst_9300-24u-a
catalyst_3850-24xs-s
catalyst_9300-24p-a
catalyst_3850-48u-l
catalyst_9300-48p-e
catalyst_9300l-48t-4g-a
catalyst_9300l-48p-4g-e
catalyst_3850-24u-l
catalyst_3850-48f-s
catalyst_9300-24s-a
catalyst_9300-48u-a
catalyst_9300-48un-e
catalyst_3850-32xs-s
catalyst_9300-48un-a
catalyst_3850-48p-e
catalyst_3850-24u-e
catalyst_9300-24u-e
catalyst_3850-48xs-e
catalyst_3850-24p-s
catalyst_9300-48uxm-a
catalyst_9300-48s-a
catalyst_3850-24s-s

CWE

CWE-347

Improper Verification of Cryptographic Signature

{"id": "CVE-2019-12649", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2019-09-25T20:15:10.557", "references": [{"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-digsig-bypass", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-digsig-bypass", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-347"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-347"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability exists because, under certain circumstances, an affected device can be configured to not verify the digital signatures of system image files during the boot process. An attacker could exploit this vulnerability by abusing a specific feature that is part of the device boot process. A successful exploit could allow the attacker to install and boot a malicious software image or execute unsigned binaries on the targeted device."}, {"lang": "es", "value": "Una vulnerabilidad en la funcionalidad de Comprobaci\u00f3n de Imagen del Software Cisco IOS XE, podr\u00eda permitir a un atacante local autenticado instalar y arrancar una imagen de software malicioso o ejecutar archivos binarios sin firmar en un dispositivo afectado. La vulnerabilidad se presenta porque, bajo determinadas circunstancias, un dispositivo afectado puede ser configurado para no comprobar las firmas digitales de los archivos de imagen del sistema durante el proceso de arranque. Un atacante podr\u00eda explotar esta vulnerabilidad mediante el abuso de una caracter\u00edstica espec\u00edfica que forma parte del proceso de arranque del dispositivo. Una explotaci\u00f3n con \u00e9xito podr\u00eda permitir al atacante instalar y arrancar una imagen de software malicioso o ejecutar archivos binarios sin firmar en el dispositivo de destino."}], "lastModified": "2024-11-21T04:23:15.607", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xe:16.8\\(1\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE1C997E-BE9F-4EB7-9451-2AAE48A99693"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:catalyst_3850-12s-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5C2A8413-DF92-4690-8BC1-A21001BDF76B"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-12s-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "882B8D8F-E154-45C3-BB47-5353167C9776"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-12xs-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A54B4EB4-EB41-4522-B7AB-C30F96099EA3"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-12xs-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EAD7BE51-0BA6-4750-B274-A6E33D32B484"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-16xs-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D5B6123E-B86F-4EC8-95D6-4CE47A7D0AC2"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-16xs-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C2305B8A-B8F2-4AF4-A86A-EFF11541D62D"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24p-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "44C3EF8E-DF88-46DC-8E06-B009F346D1D2"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24p-l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7E87F823-D924-4718-AD81-248A6C619531"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24p-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0BA01B5E-9E7B-4EE6-9480-A82B753BBB82"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24pw-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CCAC93E0-F982-4E37-866E-43B7BC5AC82E"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24s-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1FC866C9-BB98-4320-9FFA-F0960C560DA6"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24s-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "79FB0F3E-BB66-47BB-A59F-2D4C123F9CBE"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24t-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C3AD7495-3DA2-4596-9620-CD36D7C561AC"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24t-l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E492F3F8-4188-41E4-9A84-5E30C4AC3378"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24t-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "718F2FDC-9EA4-4C4C-8821-B15E56AF8101"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24u-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BC04072A-9BBE-4A9D-AE39-054D93E0C6D8"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24u-l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E45BCCD0-65BB-431F-B448-221C1595CD92"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24u-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F33BA722-0680-4074-8D03-41657F8CDCC7"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24xs-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "431570C7-74A1-4F7E-8FD0-690AEF0F823B"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24xs-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C5D22E15-E1E8-4115-A55F-5743CA9C5947"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24xu-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7B240B20-CF48-4A72-9653-9D04D59C1391"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24xu-l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "19D6AC73-67C9-4FA2-A361-FF08B0E3AF47"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24xu-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "58430463-EA77-4DC9-ACDE-4DCF92CA2FC7"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-32xs-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "74CCD143-3D6E-4880-B275-ECF5B04238C6"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-32xs-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F0D3784F-C572-4A6F-83B9-BCF64D339BC9"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48f-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E09C466B-CE87-4A57-B40B-88C94BAAF36B"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48f-l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D58FF034-8E07-4518-A858-5F16F22217E5"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48f-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "376AD386-373D-4B24-966F-D11F76C9020F"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48p-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2280CAA3-03F6-4168-8E50-A6B7132A3B0E"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48p-l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2E0C1174-C789-4547-9899-F7FCD0905F92"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48p-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EC366801-655A-403B-ACD9-3BB43802A3C5"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48pw-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FF5463D0-A8D3-43EC-8CFF-F659A8C84436"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48t-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1BD50BB2-BFD8-42F2-8C23-0D95187B01F2"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48t-l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "05D4D7E4-B195-46D8-8A6B-6AA4B8357618"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48t-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "39600E51-4A21-4E5B-9FF9-E7C00AE86646"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48u-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B13D6D50-D0FA-4527-BED3-52560DDD5253"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48u-l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "965BF315-D833-4711-97FC-512151113367"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48u-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2A0ADEBE-3DA2-4850-8115-0AC937FB0A94"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48xs-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "04072C0F-78A2-4D10-87B2-52DC2537BA89"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48xs-f-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DD5C080E-D5C4-47B2-A46C-4EB3051C5221"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48xs-f-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "41CEBEE0-DA67-4EE5-9BCF-263843053A8F"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48xs-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FD262F58-C47F-439E-A9FF-D1C60120D306"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0972076B-5C87-44B3-90EC-4C200B89318A"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-24p-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3765B3DB-8B1B-46EF-AF7D-ED1EB2079C3A"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-24p-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "74AED057-2458-4DE0-8D51-ABD766D07F68"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-24s-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "19538C03-5FB8-4401-8B21-489C629D7E7D"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-24s-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B26D7061-F471-4DF0-A892-ED132958B84A"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-24t-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "033ED443-80E7-4012-9825-07AAC0D44B96"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-24t-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AD3F3CC6-A349-47B1-B282-B6458683C191"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-24u-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CB24EF21-1C10-48A7-BC68-FFC842A28D12"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-24u-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED0625A2-BF14-4552-83D8-AEE0A04EA023"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-24ux-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CD0D6ED6-AE64-4E20-B9CD-3EAA22709CFF"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-24ux-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "21AFDC0D-7629-424E-827B-C8A8767324C3"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-48p-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A263CFF2-A659-405B-90EA-51E49B25C6D3"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-48p-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CEFBD449-217D-4569-99F7-D56B853A3E07"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-48s-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7ED668FC-D1A5-4175-A234-23760BA6E788"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-48s-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0D650C48-9241-42F7-87A9-20733329489A"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-48t-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3ED16A65-9AFF-4825-95D1-162FBA0F566D"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-48t-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "82D345E7-8208-41AC-B11A-4425D29E98A1"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-48u-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E386D461-F1C1-4970-B056-D6119E74D449"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-48u-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "99F3A466-F665-4132-ABC4-2DFC0A7E2B55"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-48un-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B3395168-FF2E-4CB6-AABE-5E36DEB241CA"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-48un-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5F525CBC-1CE6-4CAB-B1C1-DFA7EA462EF0"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-48uxm-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "226F985C-4669-4D0A-9DB4-CB1465B37B02"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300-48uxm-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0B736A43-6F4E-40A9-84E4-D9E251489234"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B2FF888F-46F5-4A79-BB88-BB2EC2D27E24"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "26437DA7-2EFE-4CA2-8DB0-9FECBEFAE4EA"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-24p-4g-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E99CA124-7D86-463B-A31E-A7836B7493E6"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E014B028-8DD9-428C-B705-8F428F145932"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-24p-4x-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A6C44229-A842-49B2-AD3E-79C83DB63EBE"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5D56D21F-0F55-4AB1-AB9B-8EAE08F4BEDA"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-24t-4g-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D3C0441D-A7AC-4B4E-970A-3A441C2F66B0"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5306E847-C718-4C83-9C97-8AB498DC4A88"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-24t-4x-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "18287CEF-B574-4498-A256-567CA6E6CA7C"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1E9AAA2C-495E-4FD1-9050-264FDC25254B"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-48p-4g-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5713043E-2535-4540-B3EF-41FAC40BECE9"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0C0C18E5-45B9-49D2-A4AB-DD8D5CB04C5C"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-48p-4x-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "67701D77-8B03-446A-AE22-4B8CCCD6F029"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5B0BEAE3-2056-4B7B-8D7C-AEE3DC86CC2A"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-48t-4g-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "831A2390-7170-4FC0-A95E-3DAB1791017D"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F788CBC4-782F-4A43-AC80-4AEF1C43A22D"}, {"criteria": "cpe:2.3:h:cisco:catalyst_9300l-48t-4x-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "493989DC-8F1B-45C9-AD11-38B97B958C9C"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c3850-12x48u-e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8B9D6819-2CFC-428A-8C51-F0D4C55D5B29"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c3850-12x48u-l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B3ECDFFB-DAD1-4BF6-85E1-1E8F94F991EA"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c3850-12x48u-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F80AC0C7-6E96-4A72-B330-33BAF004B4C6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios:16.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2245824-4120-42D0-922E-F01380704573"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}

6.7 /10