CVE-2019-1598
Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities
- Published
- Updated
- Reserved
- Assigned by
- cisco
Description
Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of LDAP packets by an affected device. An attacker could exploit these vulnerabilities by sending an LDAP packet crafted using Basic Encoding Rules (BER) to an affected device. The LDAP packet must have a source IP address of an LDAP server configured on the targeted device. A successful exploit could cause the affected device to reload, resulting in a DoS condition. Firepower 4100 Series Next-Generation Firewalls are affected in versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75. Firepower 9300 Security Appliances are affected in versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75. MDS 9000 Series Multilayer Switches are affected in versions prior to 8.2(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(1). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(2). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(20), 7.3(2)D1(1), and 8.2(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(1). UCS 6200 and 6300 Fabric Interconnect are affected in versions prior to 3.2(2b).
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| ciscoCNA (assigner) | 3.0 | High8.6 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
| NVDNVD · Modified | 3.0 | High7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 2.5% · top 15% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.6.
Weakness
Affected products
Cisco · Firepower 4100 Series Next-Generation Firewalls
- affected unspecified – < 2.0.1.201
- affected unspecified – < 2.2.2.54
- affected unspecified – < 2.3.1.75
Cisco · Firepower 9300 Security Appliance
- affected unspecified – < 2.0.1.201
- affected unspecified – < 2.2.2.54
- affected unspecified – < 2.3.1.75
Cisco · MDS 9000 Series Multilayer Switches
- affected unspecified – < 8.2(1)
Cisco · Nexus 3000 Series Switches
- affected unspecified – < 7.0(3)I7(1)
Cisco · Nexus 3500 Platform Switches
- affected unspecified – < 7.0(3)I7(2)
Cisco · Nexus 7000 and 7700 Series Switches
- affected unspecified – < 6.2(20)
- affected unspecified – < 7.3(2)D1(1)
- affected unspecified – < 8.2(1)
Cisco · Nexus 9000 Series Switches in Standalone NX-OS Mode
- affected unspecified – < 7.0(3)I7(1)
Cisco · UCS 6200 and 6300 Fabric Interconnect
- affected unspecified – < 3.2(2b)
What to do
Exploitation: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.
References (2)
- 20190306 Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
- 107394 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2019-1598)Record last updated .