Design/Logic Flaw

A vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network storm. More Information: CSCuu69332, CSCux07028. Known Affected Releases: 15.23E. Known Fixed Releases: 12.250SE4 12.250SE5 12.250SQ5...

CVE-2016-6473

CVE-2016-6473 covers a denial-of-service flaw in Cisco IOS running on Catalyst Switches and Nexus 9300 Series switches. An unauthenticated, adjacent attacker can trigger a Layer 2 network storm by abusing the device’s forwarding of Layer 2 frames that should be consumed by the first hop. Affected...

CVE-2016-6473

A vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network storm. More Information: CSCuu69332, CSCux07028. Known Affected Releases: 15.23E. Known Fixed Releases: 12.250SE4 12.250SE5 12.250SQ5...

Cisco IOS Frame Forwarding Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in Cisco IOS on Catalysts Switches and Nexus 9300 switches allows a remote attacker to exploit the vulnerability to submit a special request for a denial of...

Cisco IOS Software for Cisco Catalyst 6500 Series Switches and 7600 Series Routers ACL Bypass Vulnerability (cisco-sa-20161005-catalyst)

A vulnerability in the ternary content addressable memory TCAM share access control list ACL functionality of Cisco IOS Software running on Supervisor Engine 720 and Supervisor Engine 32 Modules for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers could allow an unauthenticated,...

Cisco IOS and IOS XE Software Smart Install Memory Leak Vulnerability

The Smart Install client feature in Cisco IOS and IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a memory leak and eventual denial of service DoS condition on an affected device. The vulnerability is due to incorrect handling of image list...

Cisco Catalyst Switches Network Mobility Services Protocol Port Information Disclosure Vulnerability (cisco-sa-20160413-nms)

Cisco Catalyst Switches running Cisco IOS Software releases may allow an unauthenticated, remote attacker to retrieve version information about the software release running on the device by accessing the Network Mobility Services Protocol NMSP port. SPDX-FileCopyrightText: 2016 Greenbone AG Some...

Cisco IOS XE Cisco Discovery Protocol Packet Processing Denial of Service Vulnerability

A vulnerability in Cisco Catalyst 4500 Series Switches running Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper processing of valid crafted Cisco Discovery Protocol packet...

Cisco IOS Software Smart Install Remote Code Execution Vulnerability (cisco-sa-20110928-smart-install)

A vulnerability exists in the Smart Install feature of Cisco Catalyst Switches running Cisco IOS Software that could allow an unauthenticated, remote attacker to perform remote code execution on the affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpt...

Cisco Catalyst Switches NMSP Port Information Disclosure Vulnerability (cisco-sa-20160413-nms)

The remote Cisco Catalyst switch is affected by an information disclosure vulnerability in IOS due to a failure by the Network Mobility Services Protocol NMSP daemon to require authentication. A remote attacker can exploit this, via a request to the NMSP port, to gain version information about th...

Cisco Catalyst Switches IOS Software Information Disclosure Vulnerability

Cisco Catalyst Switches running Cisco IOS Software is a switch product from Cisco that runs the Cisco IOS operating system. An information disclosure vulnerability exists in Cisco Catalyst Switches running Cisco IOS Software versions prior to 15.22E1 due to a failure of the program to properly...

CVE-2016-1378

Cisco IOS before 15.22E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol NMSP port, aka Bug ID CSCum62591...

CVE-2016-1378

Cisco IOS before 15.22E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol NMSP port, aka Bug ID CSCum62591...

Design/Logic Flaw

Cisco IOS before 15.22E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol NMSP port, aka Bug ID CSCum62591...

CVE-2016-1378

Cisco IOS before 15.22E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol NMSP port, aka Bug ID CSCum62591...

CVE-2016-1378

Cisco Catalyst Switches running Cisco IOS prior to 15.2(2)E1 are affected by CVE-2016-1378, a remote information-disclosure vulnerability in the Network Mobility Services Protocol (NMSP) that allows unauthenticated attackers to obtain the device software version via the NMSP port. The issue stems...

Cisco Catalyst Switches Network Mobility Services Protocol Port Information Disclosure Vulnerability

Cisco Catalyst Switches running Cisco IOS Software releases prior to 15.22E1 may allow an unauthenticated, remote attacker to retrieve version information about the software release running on the device by accessing the Network Mobility Services Protocol NMSP port. The vulnerability is due to a...

Cisco ASA DNS DoS Vulnerability (cisco-sa-20151021-asa-dns2)

A vulnerability in the DNS code of Cisco ASA may lead to a denial of service. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

Cisco ASA DNS DoS Vulnerability (cisco-sa-20151021-asa-dns1)

A vulnerability in the DNS code of Cisco ASA may lead to a denial of service. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

Cisco Catalyst 4500 SNMP Polling Denial of Service Vulnerability (Cisco-SA-20150402-CVE-2015-0687)

A vulnerability in the Simple Network Management Protocol SNMP code of Cisco Catalyst 4500 devices running Cisco IOS Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpt...