CVE-2019-12663

Cisco IOS XE Software TrustSec Protected Access Credential Provisioning Denial of Service Vulnerability

HIGH

8.6

CVSS Score

Published: September 25, 2019 at 08:15 PM UTC

Updated: June 17, 2026 at 02:15 AM UTC

49 products affected across 1 vendorIOS XeCatalyst 9300-48P-ACatalyst 9300-24P-E

Using Cisco IOS XE Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco IOS XE Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.6

Exploit prediction

EPSS 2%

SSVC

No known exploit

Description

A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of attributes in RADIUS messages. An attacker could exploit this vulnerability by sending a malicious RADIUS message to an affected device while the device is in a specific state.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS Xe · Cisco

95%

16.12.1 16.6.4

cisco-catalyst-9300-24p-a (environment) · cisco-catalyst-9300-24p-e (environment) · cisco-catalyst-9300-24s-a (environment) · cisco-catalyst-9300-24s-e (environment) · cisco-catalyst-9300-24t-a (environment) · cisco-catalyst-9300-24t-e (environment) · cisco-catalyst-9300-24u-a (environment) · cisco-catalyst-9300-24u-e (environment) · cisco-catalyst-9300-24ux-a (environment) · cisco-catalyst-9300-24ux-e (environment) · cisco-catalyst-9300-48p-a (environment) · cisco-catalyst-9300-48p-e (environment) · cisco-catalyst-9300-48s-a (environment) · cisco-catalyst-9300-48s-e (environment) · cisco-catalyst-9300-48t-a (environment) · cisco-catalyst-9300-48t-e (environment) · cisco-catalyst-9300-48u-a (environment) · cisco-catalyst-9300-48u-e (environment) · cisco-catalyst-9300-48un-a (environment) · cisco-catalyst-9300-48un-e (environment) · cisco-catalyst-9300-48uxm-a (environment) · cisco-catalyst-9300-48uxm-e (environment) · cisco-catalyst-9300l-24p-4g-a (environment) · cisco-catalyst-9300l-24p-4g-e (environment) · cisco-catalyst-9300l-24p-4x-a (environment) · cisco-catalyst-9300l-24p-4x-e (environment) · cisco-catalyst-9300l-24t-4g-a (environment) · cisco-catalyst-9300l-24t-4g-e (environment) · cisco-catalyst-9300l-24t-4x-a (environment) · cisco-catalyst-9300l-24t-4x-e (environment) · cisco-catalyst-9300l-48p-4g-a (environment) · cisco-catalyst-9300l-48p-4g-e (environment) · cisco-catalyst-9300l-48p-4x-a (environment) · cisco-catalyst-9300l-48p-4x-e (environment) · cisco-catalyst-9300l-48t-4g-a (environment) · cisco-catalyst-9300l-48t-4g-e (environment) · cisco-catalyst-9300l-48t-4x-a (environment) · cisco-catalyst-9300l-48t-4x-e (environment) · cisco-catalyst-9300l-stack (environment) · cisco-catalyst-c9500-12q-a (environment) · cisco-catalyst-c9500-12q-e (environment) · cisco-catalyst-c9500-16x-a (environment) · cisco-catalyst-c9500-16x-e (environment) · cisco-catalyst-c9500-24q-a (environment) · cisco-catalyst-c9500-24q-e (environment) · cisco-catalyst-c9500-40x-a (environment) · cisco-catalyst-c9500-40x-e (environment) · cisco-cbr-8-converged-broadband-router (environment)

Catalyst 9300-24P-A · Ciscodevice

80%

All versions

Catalyst 9300-24P-E · Ciscodevice

80%

All versions

Catalyst 9300-24S-A · Ciscodevice

80%

All versions

Catalyst 9300-24S-E · Ciscodevice

80%

All versions