CVE-2016-9216

An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an unauthenticated, remote attacker to cause the ipsecmgr process to reload. More Information: CSCuy06917 CSCuy45036 CSCuy59525. Known Affected Releases: 20.0.0 20.0.M0.62842 20.0....

CVE-2016-9216

CVE-2016-9216 describes an IKE packet parsing denial-of-service in Cisco ASR 5000 Software, affecting the ipsecmgr process. An unauthenticated, remote attacker can trigger a reload of ipsecmgr by sending specially crafted IKE packets. Root cause is a parsing/logic issue during IKE packet handling...

CVE-2017-3804: Undefined Security Weakness

A vulnerability in Intermediate System-to-Intermediate System IS-IS protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath domain crash because o...

PT-2017-9995

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Software versions 20.0.0 through 21.0.0 Description An IKE Packet Parsing Denial of Service issue in the ipsecmgr process could allow an unauthenticated, remote attacker to cause the ipsecmgr process to reload. Recommendations F...

CVE-2016-9216: Undefined Security Weakness

An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an unauthenticated, remote attacker to cause the ipsecmgr process to reload. More Information: CSCuy06917 CSCuy45036 CSCuy59525. Known Affected Releases: 20.0.0 20.0.M0.62842 20.0....

Cisco ASR 5000 Series Software Denial of Service Vulnerability (CNVD-2017-00903)

Cisco ASR 5000 Series Software is a 5000 series wireless controller product from Cisco USA. A denial of service vulnerability exists in the psecmgr process in Cisco ASR 5000 Series Software. A remote attacker can exploit this vulnerability by submitting specially crafted IKE packets to the target...

Cisco ASR 5000 Software ipsecmgr Process IKE Packet Parsing Denial of Service Vulnerability

A vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an unauthenticated, remote attacker to cause the ipsecmgr process to reload. The vulnerability is due to a logical error while parsing IKE packets. An attacker could exploit this vulnerability by submitting malformed I...

PT-2017-16109

Name of the Vulnerable Software and Affected Versions Cisco Nexus 5000, 6000, and 7000 Series Switches versions 7.13N12.1 through 7.13N13.12 Cisco Nexus 5000, 6000, and 7000 Series Switches version 7.32N10.296 Cisco Nexus 5000, 6000, and 7000 Series Switches version 8.01S2 Description A...

Rockwell Automation Logix5000 Programmable Automation Controller Buffer Overflow Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-343-05 Rockwell Automation Logix5000 Programmable Automation Controller Buffer Overflow Vulnerability that was published January 5, 2017, on the NCCIC/ICS-CERT web site. Rockwell Automation has identified a buff...

Cisco ASR 5000 Series Denial of Service Vulnerability (CNVD-2016-12775)

Cisco ASR 5000 Series Software is a 5000 series wireless controller product from Cisco USA. A security vulnerability exists in Cisco ASR 5000 Series Software. An attacker could exploit this vulnerability by sending specially crafted IKEv2 packets to cause the ipsecmgr process to crash...

CVE-2016-9203

A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. More Information: CSCvb38398. Known Affected Releases: 20.2.3 20.2.3.65026. Known Fixed Releases:...

CVE-2016-9203

A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. More Information: CSCvb38398. Known Affected Releases: 20.2.3 20.2.3.65026. Known Fixed Releases:...

CVE-2016-6467

A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router ASR 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit NPU process. More Information: CSCva84552. Known Affected Releases...

Design/Logic Flaw

A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router ASR 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit NPU process. More Information: CSCva84552. Known Affected Releases...

Design/Logic Flaw

A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. More Information: CSCvb38398. Known Affected Releases: 20.2.3 20.2.3.65026. Known Fixed Releases:...

CVE-2016-6467

A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router ASR 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit NPU process. More Information: CSCva84552. Known Affected Releases...

CVE-2016-9203

A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. More Information: CSCvb38398. Known Affected Releases: 20.2.3 20.2.3.65026. Known Fixed Releases:...

CVE-2016-9203

CVE-2016-9203 affects Cisco ASR 5000 Series software via a race condition in the IKEv2 negotiation logic that can allow an unauthenticated remote attacker to crash/restart the ipsecmgr process (denial of service). Affected releases include 20.2.3 and 20.2.3.65026; fixed releases include 21.1.M0.6...

CVE-2016-9203: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. More Information: CSCvb38398. Known Affected Releases: 20.2.3 20.2.3.65026. Known Fixed Releases:...

CVE-2016-6467: Undefined Security Weakness

A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router ASR 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit NPU process. More Information: CSCva84552. Known Affected Releases...