CVE-2015-4244

The CVE-2015-4244 issue affects Cisco ASR 5000 and ASR 5500 Series (ASK5K) boot software version 14.0, where the boot process improperly reads a local file on Compact Flash (CF). An authenticated, locally privileged attacker can place a file containing Linux commands on CF, causing those commands...

CVE-2015-4244

The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash CF file, aka Bug ID CSCuu75278...

Code injection

The Gateway General Packet Radio Service Support Node GGSN component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a denial of service Session Manager restart via an invalid TCP/IP header, aka Bug ID CSCut68058...

CVE-2015-4201

Cisco ASR 5000 GGSN vulnerability CVE-2015-4201: in Cisco GGSN TCP input handler, improper validation of TCP/IP header length allows remote attackers to restart the Session Manager, causing DoS. Affected software: ASR 5000 17.2.0.59184 and 18.0.L0.59219. Root cause is incorrect input validation o...

CVE-2015-4201

The Gateway General Packet Radio Service Support Node GGSN component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a denial of service Session Manager restart via an invalid TCP/IP header, aka Bug ID CSCut68058...

The vulnerability of the microprogramming software of Cisco Nexus 5000 allows a remote attacker to gain unauthorized access to the device.

The function for receiving messages in the ntpproto.c file continues to operate even after an error message is displayed. This allows a remote attacker to gain unauthorized access to the device using specially crafted packets...

The vulnerability of the microprogramming software of Cisco Nexus 5000 allows a remote attacker to bypass the device’s security mechanisms.

The vulnerability in the key generator implementation util/keygen.c allows a malicious individual to discover the key through brute-force attacks...

CVE-2015-0712

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

Session fixation

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

CVE-2015-0712

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

Cisco StarOS for Cisco ASR 5000 Series HTTP Packet Processing Denial of Service Vulnerability

A vulnerability in HTTP packet processing of Cisco StarOS for Cisco ASR 5000 Series devices could allow an unauthenticated, remote attacker to cause a reload of the session manager service on the affected device. The vulnerability is due to improper processing of malformed HTTP packets. An...

CVE-2015-0711

The hamgr service in the IPv6 Proxy Mobile PM implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and call-processing outage via malformed PM packets, aka Bug ID CSCut94711...

Code injection

The hamgr service in the IPv6 Proxy Mobile PM implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and call-processing outage via malformed PM packets, aka Bug ID CSCut94711...

CVE-2015-0711

The hamgr service in the IPv6 Proxy Mobile PM implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and call-processing outage via malformed PM packets, aka Bug ID CSCut94711...

CVE-2015-0711

The CVE-2015-0711 issue affects Cisco StarOS (ASR 5000) with hamgr in the IPv6 Proxy Mobile (PM) implementation (Cisco StarOS 18.1.0.59776). The root cause is improper processing of malformed IPv6 PM packets in the hamgr service, enabling a remote attacker to cause a denial of service via a servi...

The vulnerability of the microprogramming software of Cisco Nexus 5000 allows a remote attacker to bypass the device’s security mechanisms.

The configauth function generates an authentication key when no authentication key is provided; this key can be discovered through brute-force methods...

Cisco ASR 5000 Series StarOS Denial of Service Vulnerability

The Cisco ASR 5000 Series is the 5000 series of wireless controller products from Cisco.StarOS is a virtualized operating system that runs on the 5000 series of wireless controller products to dynamically allocate resources for mobile services and networks. A security vulnerability exists in the...

Cisco StarOS for Cisco ASR 5000 Series HAMGR Service Proxy Mobile IPv6 Processing Denial of Service Vulnerability

A vulnerability in proxy mobile PM IPv6 processing of Cisco StarOS for Cisco ASR 5000 Series devices could allow an unauthenticated, remote attacker to cause a reload of the hamgr service on the affected device. The vulnerability is due to improper processing of malformed IPv6 PM packets. An...

The vulnerability of the microprogramming software of Cisco Nexus 5000 allows a intruder to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

Rockwell RSLogix 5000 Password Vulnerability

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on January 21, 2014, and is now being released to the NCCIC/ICS-CERT Web site. Independent researcher Stephen Dunlap has identified a password vulnerability in the Rockwell Automation RSLogix 5000 software. Rockwell...