Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:ios_xe:15.6\(1\)s4.2:*:*:*:*:*:*:*

part: o version: 15.6(1)s4.2 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductIos Xe (e06dcf6a-4e40-54fa-8931-59bc15e7d5ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-12654 vulnerable 2026-06-08 05:12:39.859260 Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability
HIGH (8.6)
A vulnerability in the common Session Initiation Protocol (SIP) library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient sanity checks on an internal data structure. An attacker could exploit this vulnerability by sending a sequence of malicious SIP messages to an affected device. An exploit could allow the attacker to cause a NULL pointer dereference, resulting in a crash of the iosd process. This triggers a reload of the device.
Published: 2019-09-25T20:16:01.209Z
Updated: 2024-11-19T18:55:23.215Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.