CVE-2017-6672: Incorrect Authorization

A vulnerability in certain filtering mechanisms of access control lists ACLs for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022...

CVE-2017-6612: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the gateway GPRS support node GGSN of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauthenticated, remote attacker to redirect HTTP traffic sent to an affected device. More Information: CSCvc67927...

PT-2017-17233

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregation Services Routers versions prior to 22.x Description A vulnerability in certain filtering mechanisms of access control lists ACLs could allow an unauthenticated, remote attacker to bypass ACL rules that have be...

Cisco ASR 903/ASR 920 Series Denial of Service Vulnerability

The Cisco ASR 903 and ASR 920 are router products. A security vulnerability exists in the Cisco ASR 903ASR 920 series devices using RSP2 cards due to ineffective handling of IPv6 packets. An unauthenticated, physically proximate attacker caused a denial of service on the affected system...

CVE-2017-3859: Use of Externally-Controlled Format String

A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a format string vulnerability when processing a crafted...

PT-2017-2016

Name of the Vulnerable Software and Affected Versions Cisco ASR 920 Series Aggregation Services Routers versions 3.13 through 3.18 Description A vulnerability in the DHCP code for the Zero Touch Provisioning feature could allow an unauthenticated, remote attacker to cause an affected device to...

Cisco ASR 1000 Series Aggregation Services Routers IOS XE SNMP DoS Vulnerability

Cisco ASR 1000 Series Aggregation Services router with Cisco IOS XE Software is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2017-3820: Improper Initialization

A vulnerability in Simple Network Management Protocol SNMP functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a...

PT-2017-16119

Name of the Vulnerable Software and Affected Versions Cisco ASR 1000 Series Aggregation Services Routers versions 3.13.6S through 3.17.1S Cisco ASR 1000 Series Aggregation Services Routers version 15.53S2.1 Cisco ASR 1000 Series Aggregation Services Routers version 15.61S1.1 Description A...

CVE-2016-6467

CVE-2016-6467 affects Cisco ASR 5000 Series Switches (StarOS) with IPv6 packet fragment reassembly. The root cause is lack of proper input validation of IPv6 fragment lengths, enabling an unauthenticated, remote attacker to trigger a reload of the Network Processing Unit (NPU) and cause a denial ...

CVE-2016-6467: Undefined Security Weakness

A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router ASR 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit NPU process. More Information: CSCva84552. Known Affected Releases...

PT-2016-6939

Name of the Vulnerable Software and Affected Versions StarOS for Cisco Aggregation Services Router ASR 5000 Series Switch versions 20.0.0 through 21.0.M0.64702 Description A vulnerability in IPv6 packet fragment reassembly could allow an unauthenticated, remote attacker to cause an unexpected...

Cisco ASR 5000 Series Aggregation Services Routers Denial of Service Vulnerability

Cisco ASR 5000 Series Aggregation Services Routers is a set of 9000 series router devices from Cisco USA. A remote denial of service vulnerability exists in Cisco ASR 5000 Series Aggregation Services Routers. An attacker could exploit this vulnerability to cause a reload on an affected device,...

Cisco ASR 5500 Series Routers Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A security vulnerability exists in StarOS Slowpath in the Cisco ASR 5500 series routers when fitted with DPC2. Exploitation of this vulnerability by an...

Cisco ASR 900 Series Aggregation Services Routers Buffer Overflow Vulnerability

The Cisco ASR 900 Series are modular aggregation services routers. The Cisco ASR 900 has a security vulnerability in the Transaction Language 1 TL1 code that could allow a remote attacker to cause a reload of the affected system and remotely execute arbitrary code...

datasploit - A tool to perform various OSINT techniques

A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data. Overview of the tool: Performs OSINT on a domain / email / username / phone and find out information from different sources. Correlates and...

Cisco IOS XR Software for Cisco ASR 9001 Aggregation Services Routers Fragmented Packet Denial of Service Vulnerability (cisco-sa-20160810-iosxr)

A vulnerability in the driver processing functions of Cisco IOS XR Software for Cisco ASR 9001 Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a memory leak on the route processor RP of an affected device, which could cause the device to drop all control-plan...

Cisco IOS XR LPTS Denial of Service Vulnerability (/cisco-sa-20160519-ios-xr)

A vulnerability in the Local Packet Transport Services LPTS network stack of Cisco IOS XR for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a limited denial of service DoS condition on an affected platform. Copyright C 2016 Greenbone...

Cisco IOS XR Software BVI Routed Packet Denial of Service Vulnerability (cisco-sa-20150415-iosxr)

A vulnerability in the packet-processing code of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers ASR could allow an unauthenticated, remote attacker to cause a lockup and eventual reload of a network processor chip and the line card that is processing traffic. Only...

Cisco IOS XR for Cisco ASR 9000 Series Aggregation Services Routers Interface Flap Vulnerability

A vulnerability in packet processing functions of Cisco IOS XR Software running on Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause cyclic redundancy check CRC and symbol errors on the receiving interface of an affected device, which may...