National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Vulnerability Change Record for CVE-2019-12624

Change History

Initial Analysis - 8/30/2019 11:16:49 AM

Action Type Old Value New Value
Changed Reference Type
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-iosxe-ngwc-csrf No Types Assigned
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-iosxe-ngwc-csrf Vendor Advisory
Added CWE
CWE-352
Added CVSS V2
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Added CVSS V2 Metadata
Victim must voluntarily interact with attack mechanism
Added CVSS V3
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Added CPE Configuration
AND
     OR
          *cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:* versions from (including) 3.0.xe up to (including) 3.11.xe
     OR
          cpe:2.3:h:cisco:5760_wireless_lan_controller:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3650-12x48uq:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3650-12x48ur:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3650-12x48uz:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3650-24pd:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3650-24pdm:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3650-48fq:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3650-48fqm:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3650-8x24uq:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3850-12x48u:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3850-24u:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3850-24xs:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3850-24xu:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3850-48u:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3850-48xs:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3850-nm-2-40g:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_3850-nm-8-10g:-:*:*:*:*:*:*:*
          cpe:2.3:h:cisco:catalyst_4500e_supervisor_engine_8-e:-:*:*:*:*:*:*:*