CVE-2014-3404: Undefined Security Weakness

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid message via crafted messages, aka Bug ID CSCuq22677...

PT-2014-5293

Name of the Vulnerable Software and Affected Versions Cisco IOS XE affected versions not specified Description The issue is related to incomplete certificate validation in the Autonomic Networking Infrastructure ANI component. This allows remote attackers to trigger acceptance of an invalid messa...

PT-2014-5292

Name of the Vulnerable Software and Affected Versions Cisco IOS XE affected versions not specified Description The issue is related to incomplete certificate validation in the Autonomic Networking Infrastructure ANI component, allowing remote attackers to masquerade as another device by sending...

Cisco IOS XE mDNS Manipulation (CSCun64867)

According to its self-reported version, the remote IOS XE device is affected by a manipulation vulnerability. A flaw exists due to unconstrained autonomic networking with mDNS multicast Domain Name System. This could allow a remote attacker to read or overwrite autonomic networking services...

Cisco IOS XE Software Autonomic Networking Infrastructure Overwrite Vulnerability

A vulnerability in the multicast Domain Name System mDNS used for autonomic networking in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to read or overwrite autonomic networking services discovered via mDNS. The vulnerability is due to unconstrained autonomic networking...