CVE-2019-1964

Estado: ModificadaAlta (7.5)—
A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the netstack process on an affected device. The vulnerability is due to improper validation of IPv6 traffic sent through an affected device. An attacker could exploit this vulnerability by sending a malformed IPv6 packet through an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition while the netstack process restarts. A sustained attack could lead to a reboot of the device.
CVSS

Versión: 3.0
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Puntuación base: 7.5
Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 1.99%
Percentil entre todas las CVEs puntuadas: 80
Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)

Cisco — Nx-os
CWE

CWE-20
CWE-20
Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-1964",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2019-1964",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-19T17:23:20.229225Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "psirt@cisco.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 8.6,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Cisco NX-OS Software 8.1(1)",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "8.4(1)",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-08-28T19:15:10.973",
  "references": [
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-ipv6-dos",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-ipv6-dos",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@cisco.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the netstack process on an affected device. The vulnerability is due to improper validation of IPv6 traffic sent through an affected device. An attacker could exploit this vulnerability by sending a malformed IPv6 packet through an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition while the netstack process restarts. A sustained attack could lead to a reboot of the device."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en el procesamiento del tráfico IPv6 del software Cisco NX-OS podría permitir que un atacante remoto no identificado provoque un reinicio inesperado del proceso de netstack en un dispositivo afectado. La vulnerabilidad se debe a una validación incorrecta del tráfico IPv6 enviado a través de un dispositivo afectado. Un atacante podría aprovechar esta vulnerabilidad enviando un paquete IPv6 con formato incorrecto a través de un dispositivo afectado. Una explotación con éxito  podría permitir al atacante causar una condición de denegación de servicio (DoS) mientras se reinicia el proceso netstack. Un ataque sostenido podría provocar un reinicio del dispositivo."
    }
  ],
  "lastModified": "2026-06-17T02:29:42.397",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E6688A39-ABF0-4A32-B4AD-5B5C7C201658",
              "versionEndExcluding": "8.2\\(3\\)",
              "versionStartIncluding": "8.1"
            },
            {
              "criteria": "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "75DC5389-9D4E-42B6-857E-86BFCA2B47BF",
              "versionEndExcluding": "8.4",
              "versionStartIncluding": "8.3"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:7000_10-slot:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "489A59F2-D44D-44ED-844C-E0EF83A23C4F"
            },
            {
              "criteria": "cpe:2.3:h:cisco:7000_18-slot:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "79689D81-D8F0-4FB1-9B8F-62407474A042"
            },
            {
              "criteria": "cpe:2.3:h:cisco:7000_4-slot:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BBA5F539-E8AC-44B5-9E9C-2E35F6CAA22E"
            },
            {
              "criteria": "cpe:2.3:h:cisco:7000_9-slot:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D01E7A7E-7111-4C89-8EBD-080B0A3E069C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:7700_10-slot:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "ADCDCAC9-30F2-4EE3-9D02-5AA8BA6A1E99"
            },
            {
              "criteria": "cpe:2.3:h:cisco:7700_18-slot:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "610E21F4-8188-4B5E-A80F-CFE0F2B9D8A6"
            },
            {
              "criteria": "cpe:2.3:h:cisco:7700_2-slot:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "83003054-E458-4405-BA7F-A5EA415D296A"
            },
            {
              "criteria": "cpe:2.3:h:cisco:7700_6-slot:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C7610AAC-D1FE-44A8-9925-31F1CCA8AFEF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n77-f312ck-26:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F58B1C42-9150-48C9-9203-A2466FC61261"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n77-f324fq-25:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0AD5DA69-09D9-436A-8FC1-A46626DE2789"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n77-f348xp-23:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E0A9CD4D-4659-402D-BDF8-E5EF86449641"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n77-f430cq-36:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5C9DC24E-6B6E-496C-8D8C-09B197B0A77E"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n77-m312cq-26l:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9AFA9BC1-3386-4AAE-A1B6-D81761D3EA9B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n77-m324fq-25l:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9D753638-4BE8-4BF5-A083-F8360003869D"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n77-m348xp-23l:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8E6AC35C-29B2-42C7-862D-D9AC3461D8D6"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n7k-f248xp-25e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C4FD83D1-8ECB-4DB8-A6E0-2F795F83B4CF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n7k-f306ck-25:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9B875911-E742-427B-AE07-C8A5955DEA62"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n7k-f312fq-25:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CD0C6431-8EB1-4F69-AF28-8F5C55348AF5"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n7k-m202cf-22l:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AFCA5EC7-9F36-4473-B0DF-4F0F9C680F10"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n7k-m206fq-23l:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5D0E31D5-9F1D-46EC-824F-352A0098944B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n7k-m224xp-23l:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E8AD0767-C42B-4BAC-B90C-F4412B661D7A"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n7k-m324fq-25l:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B6BF05BA-E0CC-45D6-963F-27F0BD7B3C4F"
            },
            {
              "criteria": "cpe:2.3:h:cisco:n7k-m348xp-25l:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D409BDF3-9F35-4D94-9DF0-7B58A519A005"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_7000_supervisor_1:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "993AFE99-DFC3-4D92-90C8-D3A6495547BC"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_7000_supervisor_2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7453E0FA-B05D-4888-AFB0-8FE8B8040DFC"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_7000_supervisor_2e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "108DB6B5-CB29-477F-84FC-52116F295878"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_7700_supervisor_2e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4FBB9435-1CD4-469E-BF16-AD98ADC99AAB"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_7700_supervisor_3e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "42ABB93D-2C3A-4029-B545-B638B6C7788E"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}