Cisco IOS XR 参数注入漏洞

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A command injection vulnerability exists in the CLI of Cisco IOS XR versions prior to 7.3.1. The vulnerability stems from insufficient input validation of user-supplied commands. An...

The vulnerability of Cisco IOS XE routers in the Network Convergence System 520 Series allows a attacker to cause a service failure.

The vulnerability of Cisco IOS XE routers in the Network Convergence System 520 Series is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures...

Cisco IOS XE SD-WAN Software 默认配置问题漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An elevation of privilege vulnerability exists in role-based access control for SD-WAN in Cisco IOS XE. The vulnerability stems from the use of a default configuration for console...

Cisco IOS XE Software 路径遍历漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A command injection vulnerability exists in the web UI of Cisco IOS XE. The vulnerability stems from insufficient input validation. An attacker can exploit this vulnerability by...

Command Execution Vulnerability in Cisco RV345/RV340

Cisco is a leading global provider of networking solutions. A command execution vulnerability exists in the Cisco RV345/RV340 that can be exploited by an attacker to gain control of the server...

PT-2020-4648 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to a vulnerability in the web-based management interface of Cisco SD-WAN vManage Software. This vulnerability could allow an unauthenticated, remo...

The vulnerability of the Flexible NetFlow operating system in Cisco IOS XE network devices of the Cisco Catalyst 9800 Series allows a attacker to cause service interruptions.

The vulnerability of the Flexible NetFlow operating system and Cisco IOS XE network devices from the Cisco Catalyst 9800 series is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2020-3422

A vulnerability in the IP Service Level Agreement SLA responder feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the IP SLA responder to reuse an existing port, resulting in a denial of service DoS condition. The vulnerability exists because the IP SLA...

CVE-2020-3228

A vulnerability in Security Group Tag Exchange Protocol SXP in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service DoS condition. The vulnerability exists becau...

Deal: Cloud And Networking Certification Training ~ Get 97% OFF

Cloud computing and networking are two of the most significant areas of growth in the IT business. Companies need engineers who can maintain distributed software and keep the company connected. If you want to work in either niche, the Essential Cloud & Networking Certification Training Bundle...

The vulnerability of the Border Gateway Protocol (BGP) implementation in Ethernet VPN technology of the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created Multicast Leav...

Cisco IOS XE Virtualization Manager CLI Command Injection Vulnerability

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A command injection vulnerability exists in Cisco IOS XE's CLI commands related to the Virtualization Manager. The vulnerability stems from insufficient validation of parameters...

CVE-2019-12651

Multiple vulnerabilities in the web-based user interface Web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device. For more information about these vulnerabilities, see the Details section of this advisory...

The vulnerability in the web-server software of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a attacker to reveal the names of files located in the vulnerable system.

The vulnerability of Cisco Enterprise NFV Infrastructure Software’s web server software relates to the leakage of file and directory information. Exploiting this vulnerability can allow a malicious actor to disclose the names of files located in the vulnerable system using a specially crafted que...

The vulnerability of the Web framework component of the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the Web framework component of the Cisco IOS XE operating system arises due to errors in parsing HTTP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted HTTP packet...

CVE-2018-15368

A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected software improperl...

CVE-2018-0434

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

Cisco IOS XR netconf Denial of Service Vulnerability

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A resource management error vulnerability exists in the netconf interface in Cisco IOS XR Software that stems from the...

Cisco IOS XE Software CLI Parser OS Command Injection Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco for its network devices.CLI parser is one of the command line command parsers. The CLI parser in Cisco IOS XE Software is vulnerable to an operating system command injection vulnerability that arises from a program that fails to...

Cisco IOS XE Software CLI parser elevation of privilege vulnerability (CNVD-2018-08182)

Cisco IOS XE Software is an operating system developed by Cisco for its network devices.CLI parser is one of the command line command parsers. The CLI parser in Cisco IOS XE Software is vulnerable to a privilege extraction vulnerability that arises from the program's failure to properly filter...