High severity8.6NVD Advisory· Published Sep 25, 2019· Updated Jun 17, 2026

CVE-2019-12663

Description

A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of attributes in RADIUS messages. An attacker could exploit this vulnerability by sending a malicious RADIUS message to an affected device while the device is in a specific state.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./iOS Xe2 versions
cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*
Cisco Systems, Inc./TrustSec (CTS) Protected Access Credential (PAC) provisioning modulellm-create
Cisco Systems, Inc./IOS and IOS XE Softwarellm-fuzzy
Cisco Systems, Inc./IOS XE Software for Cisco Merakicpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-ctspac-dosnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.559
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000