Cisco IOS XE Command Injection Vulnerability (CNVD-2020-31974)

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A command injection vulnerability exists in the Web UI in Cisco IOS XE, which stems from the program failing to perform sufficient input validation for HTTP requests. A remote...

CVE-2019-12667

A vulnerability in the web framework code of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some...

CVE-2019-1946

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an unauthenticated, remote attacker to bypass authentication and get limited access to the web-based management interface. The vulnerability is due to an incorrect implementatio...

CVE-2019-1783

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments...

Cisco IOS XE Software Digital Signature Authentication Bypass Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A digital signature verification bypass vulnerability exists in the Image Verification feature of Cisco IOS XE Software, which arises from a failure of the affected software to properly verify the electronic...

Cisco IOS XE Software CLI Parser Command Injection Vulnerability (CNVD-2018-20299)

Cisco IOS XE Software is an operating system developed by Cisco for its network devices.CLI parser is one of the command line command parsers. A command injection vulnerability exists in the CLI parser in Cisco IOS XE Software, which arises from an affected application failing to properly filter...

Cisco IOS XE Software REST API Authorization Issue Vulnerability

Cisco IOS XE Software is the United States Cisco Cisco company's set of operating system developed for its network equipment. the REST API is one of the support for lightweight REST-style Web scripting API. An authorization issue vulnerability exists in the REST API in Cisco IOS XE Software, whic...

Cisco IOS XE Cross-Site Scripting Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A cross-site scripting vulnerability exists in the Web UI in Cisco IOS XE Software, which arises from a program's failure to perform sufficient input validation of parameters sent to the affected software via...

CVE-2018-0196

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to write arbitrary files to the operating system of an affected device. The vulnerability is due to insufficient input validation of HTTP requests that are sent to the web...

CVE-2018-0173

A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 DHCPv4 packets could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a Relay Reply denial of service DoS...

Cisco IOS XE Software ANI Certificate Revocation Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in the Autonomic Networking feature of Cisco IOS XE Software allows remote attackers to exploit the vulnerability by submitting a special request to revoke a...

CVE-2016-1428

Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service device restart via a sequence of crafted SNMP read requests, aka Bug ID CSCux13174...

Cisco IOS and IOS XE Software Internet Key Exchange Denial of Service Vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A security vulnerability exists in the IKE version 2 fragmentation code in Cisco IOS and IOS XE Software due to the program failing to properly handle fragmented IKEv2 packets. A remote attacker...

Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2015-02658)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability exists in Cisco IOS XR Software. An attacker is allowed to exploit this vulnerability to launch a denial of service attack...

PT-2002-2428 · Cisco · Cisco Ios +2

Name of the Vulnerable Software and Affected Versions: Cisco IOS software versions 11.3 through 12.2 Description: The issue allows remote attackers to modify Data Over Cable Service Interface Specification DOCSIS settings via a DOCSIS file without a Message Integrity Check MIC signature, which is...