Cisco IOS XE Software Autonomic Networking Infrastructure Certificate Chain Validation Vulnerability

A vulnerability in certificate validation for Autonomic Network Infrastructure ANI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to provide an invalid message and have the ANI device accept it. The vulnerability is due to incomplete certificate validation. An attacker...

Design/Logic Flaw

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647...

Design/Logic Flaw

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid message via crafted messages, aka Bug ID CSCuq22677...

CVE-2014-3405

Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks aka RPL on both the Autonomic Control Plane ACP and external Autonomic Networking Infrastructure ANI interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an AN...

CVE-2014-3404

Cisco IOS XE's Autonomic Networking Infrastructure (ANI) has a certificate validation vulnerability (CVE-2014-3404) due to incomplete certificate validation in the ANI component. A remote attacker could send crafted messages to the ANI device and cause acceptance of an invalid message. The Cisco ...

CVE-2014-3403

The CVE-2014-3403 issue affects Cisco IOS XE Autonomic Networking Infrastructure (ANI). The vulnerability arises from incomplete certificate validation in ANI, enabling a remote attacker to spoof devices by sending crafted messages. The Cisco security advisory describes this as a certificate-vali...

Cisco IOS XE mDNS Manipulation (CSCun64867)

According to its self-reported version, the remote IOS XE device is affected by a manipulation vulnerability. A flaw exists due to unconstrained autonomic networking with mDNS multicast Domain Name System. This could allow a remote attacker to read or overwrite autonomic networking services...

Cisco IOS XE Software Autonomic Networking Infrastructure Overwrite Vulnerability

A vulnerability in the multicast Domain Name System mDNS used for autonomic networking in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to read or overwrite autonomic networking services discovered via mDNS. The vulnerability is due to unconstrained autonomic networking...