Cisco IOS and IOS XE Software Autonomic Networking Infrastructure Registrar Denial of Service Vulnerability

A vulnerability in the Autonomic Networking Infrastructure ANI registrar feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to incomplete input validation on certain crafted...

Multiple Vulnerabilities in Cisco IOS Software and IOS XE Software Autonomic Networking Infrastructure

The Autonomic Networking Infrastructure ANI feature of Cisco IOS Software and IOS XE Software has multiple vulnerabilities which could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or gain limited command and control of the device. Autonomic Networking...

Cisco ANI Configuration Overwrite DoS (CSCup62167)

The remote Cisco device is affected by a vulnerability in the Autonomic Networking Infrastructure ANI due to insufficient validation of received Autonomic Networking AN messages. A remote, unauthenticated attacker, by sending specially crafted AN messages, can exploit this to overwrite...

Cisco IOS XE Autonomic Networking Infrastructure Multiple Vulnerabilities (cisco-sa-20150325-ani)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by the following vulnerabilities : - A flaw exists in the ANI due to failing to properly validate Autonomic Networking AN messages. This could allow a remote attacker to spoof an Autonomic...

Cisco IOS Autonomic Networking Infrastructure Multiple Vulnerabilities (cisco-sa-20150325-ani)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by the following vulnerabilities in the Autonomic Networking Infrastructure ANI : - A flaw exists in the ANI implementation due to failing to properly validate Autonomic Networking AN response...

Design/Logic Flaw

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority ANRA responses, and consequently bypass intended device and...

Design/Logic Flaw

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service disrupted domain access via spoofed AN messages that reset a finite state machine,...

Design/Logic Flaw

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service device reload via spoofed AN messages, aka Bug ID CSCup62315...

CVE-2015-0635

CVE-2015-0635 affects Cisco IOS and IOS XE ANI (Autonomic Networking Infrastructure). Affected: IOS 12.2, 12.4, 15.0–15.4 and IOS XE 3.10.xS–3.13.xS before 3.13.1S. Vulnerable component: ANI implementation handling Autonomic Networking (AN) messages/ANRA responses. Root cause: improper validation...

CVE-2015-0637

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service device reload via spoofed AN messages, aka Bug ID CSCup62315...

CVE-2015-0636

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service disrupted domain access via spoofed AN messages that reset a finite state machine,...

Multiple Vulnerabilities in Cisco IOS Software and IOS XE Software Autonomic Networking Infrastructure

The Autonomic Networking Infrastructure ANI feature of Cisco IOS Software and IOS XE Software has multiple vulnerabilities which could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or gain limited command and control of the device. Autonomic Networking...

Cisco IOS Autonomic Networking Infrastructure Denial of Service Vulnerability

Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in the Autonomic Networking Infrastructure ANI implementation of Cisco IOS Release 15.4S and Release 15.43S. A remote attacker could exploit this vulnerability by sending specially crafted...

CVE-2015-0669

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 15.4S and 15.43S allows remote attackers to modify configuration settings or cause a denial of service partial service outage by sending crafted Autonomic Networking AN messages on an intranet network, aka Bug ID CSCup62167...

Cisco IOS Software Autonomic Networking Infrastructure Overwrite Vulnerability

A vulnerability in the Autonomic Networking Infrastructure ANI feature of Cisco IOS software could allow an unauthenticated, remote attacker to overwrite some configuration values received via ANI. The vulnerability is due to insufficient validation of received Autonomic Networking AN messages. A...

Code injection

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS allows remote attackers to trigger self-referential adjacencies via a crafted Autonomic Networking AN message, aka Bug ID CSCup62157...

CVE-2015-0659

CVE-2015-0659 concerns Cisco IOS Autonomic Networking Infrastructure (ANI). The ANI implementation allows remote attackers to trigger self-referential adjacencies by sending crafted Autonomic Networking (AN) messages (Bug ID CSCup62157). Affected: ANI component of Cisco IOS. Reported impact indic...

Unspecified Vulnerability in Cisco IOS Autonomic Networking Infrastructure Feature

Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in the Autonomic Networking Infrastructure ANI feature of Cisco IOS, which stems from the program's failure to adequately validate data. A remote attacker could exploit the vulnerability b...

Cisco IOS XE Software Autonomic Networking Infrastructure Routing Protocol for Low-Power and Lossy Networks Vulnerability

A vulnerability in the IPv6 Routing Protocol for Low-Power and Lossy Networks RPL of Cisco IOS XE could allow an unauthenticated, adjacent attacker to inject routes into the autonomic control plane ACP. The vulnerability is due to RPL being active on ACP as well as the external Autonomic Networki...

Cisco IOS XE Software Autonomic Networking Infrastructure Certificate Validation Vulnerability

A vulnerability in certificate validation for Autonomic Networking Infrastructure ANI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to masquerade as another device. The vulnerability is due to incomplete certificate validation. An attacker could exploit this vulnerabili...