CVE-2015-4244: Improper Neutralization of Special Elements used in an OS Command

The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash CF file, aka Bug ID CSCuu75278...

Code injection

The Gateway General Packet Radio Service Support Node GGSN component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a denial of service Session Manager restart via an invalid TCP/IP header, aka Bug ID CSCut68058...

CVE-2015-4201

The Gateway General Packet Radio Service Support Node GGSN component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a denial of service Session Manager restart via an invalid TCP/IP header, aka Bug ID CSCut68058...

CVE-2015-4201

Cisco ASR 5000 GGSN vulnerability CVE-2015-4201: in Cisco GGSN TCP input handler, improper validation of TCP/IP header length allows remote attackers to restart the Session Manager, causing DoS. Affected software: ASR 5000 17.2.0.59184 and 18.0.L0.59219. Root cause is incorrect input validation o...

PT-2015-6455

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 Description The issue allows remote attackers to cause a denial of service, resulting in a Session Manager restart, by sending an invalid TCP/IP header. Recommendations For...

CVE-2015-4201: Improper Input Validation

The Gateway General Packet Radio Service Support Node GGSN component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a denial of service Session Manager restart via an invalid TCP/IP header, aka Bug ID CSCut68058...

CVE-2015-0775: Undefined Security Weakness

The banner aka MOTD implementation in Cisco NX-OS 4.12E11f on Nexus 4000 devices, 5.21SV32.1 on Nexus 1000V devices, 6.02N22 on Nexus 5000 devices, 6.211 on MDS 9000 devices, 6.212 on Nexus 7000 devices, 7.03 on Nexus 9000 devices, and 7.20ZN99.67 on Nexus 3000 devices allows remote attackers to...

The vulnerability of the microprogramming software of Cisco Nexus 5000 allows a remote attacker to bypass the device’s security mechanisms.

The vulnerability in the key generator implementation util/keygen.c allows a malicious individual to discover the key through brute-force attacks...

The vulnerability of the microprogramming software of Cisco Nexus 5000 allows a remote attacker to gain unauthorized access to the device.

The function for receiving messages in the ntpproto.c file continues to operate even after an error message is displayed. This allows a remote attacker to gain unauthorized access to the device using specially crafted packets...

CVE-2015-0712

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

Session fixation

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

CVE-2015-0712

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

CVE-2015-0712: Undefined Security Weakness

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

Cisco StarOS for Cisco ASR 5000 Series HTTP Packet Processing Denial of Service Vulnerability

A vulnerability in HTTP packet processing of Cisco StarOS for Cisco ASR 5000 Series devices could allow an unauthenticated, remote attacker to cause a reload of the session manager service on the affected device. The vulnerability is due to improper processing of malformed HTTP packets. An...

CVE-2015-0711

The hamgr service in the IPv6 Proxy Mobile PM implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and call-processing outage via malformed PM packets, aka Bug ID CSCut94711...

Code injection

The hamgr service in the IPv6 Proxy Mobile PM implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and call-processing outage via malformed PM packets, aka Bug ID CSCut94711...

CVE-2015-0711

The hamgr service in the IPv6 Proxy Mobile PM implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and call-processing outage via malformed PM packets, aka Bug ID CSCut94711...

CVE-2015-0711

The CVE-2015-0711 issue affects Cisco StarOS (ASR 5000) with hamgr in the IPv6 Proxy Mobile (PM) implementation (Cisco StarOS 18.1.0.59776). The root cause is improper processing of malformed IPv6 PM packets in the hamgr service, enabling a remote attacker to cause a denial of service via a servi...

Cisco ASR 5000 Series StarOS Denial of Service Vulnerability

The Cisco ASR 5000 Series is the 5000 series of wireless controller products from Cisco.StarOS is a virtualized operating system that runs on the 5000 series of wireless controller products to dynamically allocate resources for mobile services and networks. A security vulnerability exists in the...

The vulnerability of the microprogramming software of Cisco Nexus 5000 allows a remote attacker to bypass the device’s security mechanisms.

The configauth function generates an authentication key when no authentication key is provided; this key can be discovered through brute-force methods...