OPERATIONAL DEFECT DATABASE
...
...
This product includes Third-party Software that is affected by the vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) IDs: CVE-2019-12749 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12749 CVE-2020-12049 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12049 CVE-2022-42010 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42010 CVE-2022-42011 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42011 CVE-2022-42012 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42012 CVE-2023-34969 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34969 After analysis, Cisco has decided against performing additional actions on this product due to one of the following reasons: - The product is no longer maintained, having reached End of Software Maintenance. - The product is still being maintained, but a business decision was made not to upgrade the vulnerable product. - The product uses the affected third-party component in such a way as to not be affected by these vulnerabilities.
Device with default configuration.
Not available or not applicable.
Additional details about the vulnerabilities listed above can be found at https://www.cve.org/. PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 3.0 score. The Base CVSS score as of the time of evaluation is: 7.1 https://tools.cisco.com/security/center/cvssCalculator.x?version=3.0&vector=CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C CVE ID CVE-2019-12749, CVE-2020-12049, CVE-2022-42010, CVE-2022-42011, CVE-2022-42012, CVE-2023-34969 have been assigned to document this issue. Additional information on Cisco's security vulnerability policy can be found at the following URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
Click on a version to see all relevant bugs
Cisco Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
