Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2019-1757

Cisco IOS and IOS XE Software Smart Call Home Certificate Validation Vulnerability

Medium5.9EPSS 1.1%
Published
Updated
Reserved
Assigned by
cisco

Description

A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software.

Scores

CVSS scores of CVE-2019-1757, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.1Medium5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS (exploitation in 30 days)
1.1% · top 35% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.9.

Weakness

Affected products

  • Cisco · Cisco IOS and IOS XE Software

    • affected 3.6.4E
    • affected 3.6.5E
    • affected 3.6.6E
    • affected 3.6.5aE
    • affected 3.6.5bE
    • affected 3.6.7E
    • affected 3.6.8E
    • affected 3.6.7aE
    • affected 3.6.7bE
    • affected 3.7.4E
    • affected 3.7.5E
    • affected 3.16.1S
    • affected 3.16.1aS
    • affected 3.16.2S
    • affected 3.16.2aS
    • affected 3.16.3S
    • affected 3.16.2bS
    • affected 3.16.3aS
    • affected 3.16.4S
    • affected 3.16.4aS
    • affected 3.16.4bS
    • affected 3.16.4gS
    • affected 3.16.5S
    • affected 3.16.4cS
    • affected 3.16.4dS
    • affected 3.16.4eS
    • affected 3.16.6S
    • affected 3.16.5aS
    • affected 3.16.5bS
    • affected 3.16.7S
    • affected 3.16.6bS
    • affected 3.16.7aS
    • affected 3.16.7bS
    • affected 3.17.0S
    • affected 3.17.1S
    • affected 3.17.2S
    • affected 3.17.1aS
    • affected 3.17.3S
    • affected 3.17.4S
    • affected 16.2.1
    • and 69 more

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2019-1757 badge
[![CVE-2019-1757](https://trackcve.app/badge/CVE-2019-1757.svg)](https://trackcve.app/cve/CVE-2019-1757)

Record last updated .