CVE-2019-1842
Vulnerability from cvelistv5
Published
2019-06-05 16:20
Modified
2024-09-16 18:54
Severity ?
5.4 (Medium) - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Summary
Cisco IOS XR Software Secure Shell Authentication Vulnerability
References
ykramarz@cisco.comhttp://www.securityfocus.com/bid/108687Third Party Advisory, VDB Entry
ykramarz@cisco.comhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-iosxr-sshVendor Advisory
Impacted products
CiscoCisco IOS XR Software
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T18:28:42.866Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20190605 Cisco IOS XR Software Secure Shell Authentication Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-iosxr-ssh"
          },
          {
            "name": "108687",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/108687"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco IOS XR Software",
          "vendor": "Cisco",
          "versions": [
            {
              "lessThan": "6.1.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2019-06-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the Secure Shell (SSH) authentication function of Cisco IOS XR Software could allow an authenticated, remote attacker to successfully log in to an affected device using two distinct usernames. The vulnerability is due to a logic error that may occur when certain sequences of actions are processed during an SSH login event on the affected device. An attacker could exploit this vulnerability by initiating an SSH session to the device with a specific sequence that presents the two usernames. A successful exploit could result in logging data misrepresentation, user enumeration, or, in certain circumstances, a command authorization bypass. See the Details section for more information."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "CWE-285",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-06-10T07:06:04",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20190605 Cisco IOS XR Software Secure Shell Authentication Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-iosxr-ssh"
        },
        {
          "name": "108687",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/108687"
        }
      ],
      "source": {
        "advisory": "cisco-sa-20190605-iosxr-ssh",
        "defect": [
          [
            "CSCvo03672"
          ]
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco IOS XR Software Secure Shell Authentication Vulnerability",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2019-06-05T16:00:00-0700",
          "ID": "CVE-2019-1842",
          "STATE": "PUBLIC",
          "TITLE": "Cisco IOS XR Software Secure Shell Authentication Vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco IOS XR Software",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_value": "6.1.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the Secure Shell (SSH) authentication function of Cisco IOS XR Software could allow an authenticated, remote attacker to successfully log in to an affected device using two distinct usernames. The vulnerability is due to a logic error that may occur when certain sequences of actions are processed during an SSH login event on the affected device. An attacker could exploit this vulnerability by initiating an SSH session to the device with a specific sequence that presents the two usernames. A successful exploit could result in logging data misrepresentation, user enumeration, or, in certain circumstances, a command authorization bypass. See the Details section for more information."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
          }
        ],
        "impact": {
          "cvss": {
            "baseScore": "5.4",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-285"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20190605 Cisco IOS XR Software Secure Shell Authentication Vulnerability",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-iosxr-ssh"
            },
            {
              "name": "108687",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/108687"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-20190605-iosxr-ssh",
          "defect": [
            [
              "CSCvo03672"
            ]
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2019-1842",
    "datePublished": "2019-06-05T16:20:15.262993Z",
    "dateReserved": "2018-12-06T00:00:00",
    "dateUpdated": "2024-09-16T18:54:17.722Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2019-1842\",\"sourceIdentifier\":\"ykramarz@cisco.com\",\"published\":\"2019-06-05T17:29:00.430\",\"lastModified\":\"2020-10-16T15:41:44.930\",\"vulnStatus\":\"Analyzed\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the Secure Shell (SSH) authentication function of Cisco IOS XR Software could allow an authenticated, remote attacker to successfully log in to an affected device using two distinct usernames. The vulnerability is due to a logic error that may occur when certain sequences of actions are processed during an SSH login event on the affected device. An attacker could exploit this vulnerability by initiating an SSH session to the device with a specific sequence that presents the two usernames. A successful exploit could result in logging data misrepresentation, user enumeration, or, in certain circumstances, a command authorization bypass. See the Details section for more information.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la funci\u00f3n de identificaci\u00f3n Secure Shell (SSH) del software IOS XR de Cisco, podr\u00eda permitir a un atacante remoto identificado iniciar sesi\u00f3n correctamente en un dispositivo afectado usando dos nombres de usuario distintos. La vulnerabilidad es debido a un error l\u00f3gico que puede ocurrir cuando ciertas secuencias de acciones son procesadas durante un evento de inicio de sesi\u00f3n SSH en el dispositivo afectado. Un atacante podr\u00eda aprovechar esta vulnerabilidad mediante el inicio de una sesi\u00f3n SSH en el dispositivo con una secuencia espec\u00edfica que presenta los dos nombres de usuario. Una operaci\u00f3n con \u00e9xtio podr\u00eda resultar en el registro de datos falsos, enumeraci\u00f3n de usuarios o, en ciertas circunstancias, una omisi\u00f3n de la autorizaci\u00f3n de comandos. Vea la secci\u00f3n de Detalles para m\u00e1s informaci\u00f3n.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\"},\"exploitabilityScore\":2.8,\"impactScore\":2.5}],\"cvssMetricV30\":[{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\"},\"exploitabilityScore\":2.8,\"impactScore\":2.5}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:P/I:P/A:N\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\",\"baseScore\":5.5},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-287\"}]},{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-285\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xr_firmware:6.1.2.tools:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C7572F0-53A7-49B2-97A5-A9FAC7AFAD3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xr_firmware:6.1.3.tools:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36326A0C-80EB-4AC3-8B99-5BCA81F100D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xr_firmware:6.2.3.tools:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0004444D-F0B5-4AFC-B02A-515AEBFB8CFA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xr_firmware:6.4.2.tools:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C67AFE4B-EAF7-457D-8948-11C86FC483C7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"324C97E6-1810-404F-9F45-6240F99FF039\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57EB55BB-41B7-40A1-B6F5-142FE8AB4C16\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"433F4A82-04A4-4EAA-8C19-F7581DCD8D29\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:asr_9901:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D5E60AB-94FF-448A-89D8-5D2197E21C74\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A93212A4-50AB-42E7-89A4-5FBBAEA050C3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:asr_9906:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EDA53A61-98B3-458C-8893-61CD7D6B1E48\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:asr_9910:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F396564E-B477-4A27-A189-CEB737552E25\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5445CC54-ACFB-4070-AF26-F91FEAA85181\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:asr_9922:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D7AA58E5-D7E1-48CF-93FF-C60EB85B2BC7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-1_16-slot_line_card_chassis:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A5D5476-202C-476C-BC43-C0A963C99079\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-1_16-slot_single-shelf_system:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0F7E3D1-B738-4B69-AB38-3A273F454B9A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-1_4-slot_single-shelf_system:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2039DB3-F6BA-434D-A395-41DF7B641E4D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-1_8-slot_line_card_chassis:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C078ABAD-0E35-481F-8096-FDD40451A318\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-1_8-slot_single-shelf_system:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8A8B9BF-E548-4CD9-AEC0-7030B89C4A32\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-1_fabric_card_chassis:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"941333EC-86D4-43AC-BD9A-D286B2276C95\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-1_line_card_chassis_\\\\(dual\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD07CEAB-98E4-4FEE-BFA4-ADA520F7A61F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-1_line_card_chassis_\\\\(multi\\\\):-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE33AF1E-5E5C-43A1-B2E3-28E823C47E99\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-1_multishelf_system:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BBA0BE4-ED73-4B8C-BE53-5A2AB76981D0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-3_16-slot_single-shelf_system:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76F8EEEF-085A-49A5-A50E-24922B300F75\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-3_4-slot_single-shelf_system:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10698948-E6E0-4C9B-9CB9-3626E4076336\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-3_8-slot_single-shelf_system:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40EF0D7E-FB4E-433A-A983-34E44E790542\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-3_multishelf_system:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15448B60-0A19-477C-A08A-17578CF7C92C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-8\\\\/s-b_crs:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D31F6ED1-B20E-44CA-A74B-9D767EDF045F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-8\\\\/scrs:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BDEC7F0-D4D5-45F0-89A4-49C596318C01\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-x_16-slot_single-shelf_system:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16770F6C-539D-4B65-9C52-60F008C283D2\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:crs-x_multishelf_system:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4F47E9F-D7BA-49B9-8070-1BC610B6AE2D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:ncs_6008-8-slot_chassis:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E8AFAF4-4392-4EB5-AA35-68B97B036B62\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:network_convergence_system_5508:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2932D6BF-111E-4B56-9A2E-FDF7C6991097\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/108687\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-iosxr-ssh\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.