Cisco Aggregation Services Router ASR 5000 and ASR 5500 OSPF Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First OSPF protocol implementation of the Cisco Aggregation Services Router ASR 5000 and ASR 5500 System Software could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition because the OSPF process restarts. The...

Cisco ASR 5000 Router GTPv2 Input Authentication Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A security vulnerability in the Cisco ASR 5000 Router allows a remote attacker to submit a special GTPv2 message to trigger an input validation error on the target...

CVE-2015-4275

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet, aka Bug ID CSCut11534...

Command injection

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet, aka Bug ID CSCut11534...

CVE-2015-4275

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet, aka Bug ID CSCut11534...

CVE-2015-4275

CVE-2015-4275 affects the Cisco Packet Data Network Gateway (PGW) on Cisco ASR 5000 devices, specifically software 18.0.0.59167 and 18.0.0.59211. The vulnerability stems from lack of input validation in GTPv2 packet headers, allowing remote attackers to trigger a denial of service and partial ava...

Cisco ASR Arbitrary Linux Command Execution Vulnerability

The Cisco ASR 5000 and 5500 devices are Cisco's 5000 series of wireless controller products. The boot implementation of the Cisco ASR 5000 and 5500 devices failed to properly read the local file in the COMPACT FLASH, allowing an attacker logged in with administrator privileges to submit special...

PT-2015-6494

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 devices with software versions 18.0.0.59167 and 18.0.0.59211 Description The issue allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet. Recommendations For version 18.0.0.59167, update t...

CVE-2015-4275: Undefined Security Weakness

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet, aka Bug ID CSCut11534...

CVE-2015-4273

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 15.0912, 15.0935, and 15.0938 allows remote attackers to cause a denial of service Session Manager outage via malformed fields in an IP packet, aka Bug ID CSCut38476...

Design/Logic Flaw

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 15.0912, 15.0935, and 15.0938 allows remote attackers to cause a denial of service Session Manager outage via malformed fields in an IP packet, aka Bug ID CSCut38476...

CVE-2015-4273

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 15.0912, 15.0935, and 15.0938 allows remote attackers to cause a denial of service Session Manager outage via malformed fields in an IP packet, aka Bug ID CSCut38476...

CVE-2015-4273

CVE-2015-4273 affects the Cisco ASR 5000 Series Packet Data Network Gateway (PGW) IP stack. The vulnerability arises from improper input validation of certain fields in IP packets, allowing remote, unauthenticated attackers to cause a denial of service, specifically a Session Manager outage, on d...

CVE-2015-4273: Improper Input Validation

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 15.0912, 15.0935, and 15.0938 allows remote attackers to cause a denial of service Session Manager outage via malformed fields in an IP packet, aka Bug ID CSCut38476...

PT-2015-6492

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 devices with software versions 15.0912, 15.0935, and 15.0938 Description The issue allows remote attackers to cause a denial of service, specifically a Session Manager outage, by sending IP packets with malformed fields...

Design/Logic Flaw

The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash CF file, aka Bug ID CSCuu75278...

CVE-2015-4244

The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash CF file, aka Bug ID CSCuu75278...

CVE-2015-4244

The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash CF file, aka Bug ID CSCuu75278...

CVE-2015-4244

The CVE-2015-4244 issue affects Cisco ASR 5000 and ASR 5500 Series (ASK5K) boot software version 14.0, where the boot process improperly reads a local file on Compact Flash (CF). An authenticated, locally privileged attacker can place a file containing Linux commands on CF, causing those commands...

PT-2015-6480

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 and 5500 devices with software version 14.0 Description The issue allows local users with administrative privileges to execute arbitrary Linux commands on the device. This is achieved by storing the commands in a Compact Flash C...