VulnCheck KEV: CVE-2017-12235

A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol PN-DCP for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service...

The vulnerability in the implementation of the Control Point and Wireless Access Point Provisioning Protocol (CAPWAP) of the Cisco IOS XE operating system allows a attacker to trigger a service failure.

The vulnerability of the CAPWAP management protocol implementation and wireless access point provisioning in Cisco IOS XE operating systems is related to insufficient validation of CAPWAP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco IOS and Cisco IOS XE operating systems is related to initialization errors. Exploiting this vulnerability allows a malicious actor to cause service failures through the command line interface or by sending special...

Cisco AsyncOS for Cisco Email Security Appliance 输入验证错误漏洞

The Cisco Email Security Appliance ESA and Cisco AsyncOS are both products of Cisco, Inc.The Cisco Email Security Appliance is an email security appliance.The Cisco AsyncOS is an operating system for Cisco devices. Cisco AsyncOS is an operating system for Cisco devices. An input validation error...

CVE-2021-1620

A vulnerability in the Internet Key Exchange Version 2 IKEv2 support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to exhaust the free IP addresses from the assigned local pool. This vulnerability occurs because the cod...

The vulnerability of the Cisco IOS XR operating system, related to resource management errors, allows a attacker to reboot the compromised line card.

The vulnerability of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause a reboot of the affected line card by sending certain types of Ethernet frames to the segment connected to the affected line cards...

CVE-2021-34705

A vulnerability in the Voice Telephony Service Provider VTSP service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured destination patterns and dial arbitrary numbers. This vulnerability is due to insufficient validation of dial...

Cisco IOS XE Software 代码问题漏洞

Cisco IOS XE Software is an operating system from the U.S. company Cisco Cisco. A single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity.A denial-of-service vulnerability exists in Cisco IOS XE Software tha...

多款Cisco产品资源管理错误漏洞

Cisco IOS and others are products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.IOS XE is a set of operating systems developed for its network devices.SD-WAN Software is one of the software-defined WAN software.Cisco IOS XE Software is an operating system...

Cisco IOS XE Software 安全漏洞

Cisco IOS and Cisco IOS XE Software are both products of the U.S. company Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is an operating system. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN,...

The vulnerability of the implementation of the Resource Public Key Infrastructure (RPKI) function in the Cisco IOS XR operating system allows a perpetrator to cause a failure in the Border Gateway Protocol (BGP) process.

The vulnerability of the Resource Public Key Infrastructure RPKI function in the Cisco IOS XR operating system is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause failures in the Border Gateway Protocol BGP process...

Cisco IOS XR 操作系统命令注入漏洞

Cisco IOS XR Software is an operating system developed by Cisco for its network devices.An elevation of privilege vulnerability exists in Cisco IOS XR Software, which could be exploited by attackers to elevate the privileges of affected devices...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Cisco Ios

About 这个github仓库，是eqgrp-free-file.tar.xz 的免费解压版本， 源文件由“The Shadow Brokers”黑客组织放出。 加密的拍卖版本可以在网上找到和下载。 Firewall 这个文件夹包含了所有的源文件。 listing.txt则是所有文件的清单。 This repository contains the decrypted and decompressed contents of the eqgrp-free-file.tar.xz file released by "The Shadow Brokers". The contents ar...

The vulnerability of the DECnet Phase IV and DECnet/OSI operating systems of Cisco IOS XE allows a attacker to cause a service failure or trigger a device restart.

The vulnerability of the DECnet Phase IV and DECnet/OSI operating systems of Cisco IOS XE exists due to insufficient testing of incoming traffic. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service failure...

The vulnerability of the Address Resolution Protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.

The vulnerability of the Address Resolution Protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the dragonite component in Cisco IOS XE and Cisco IOS operating systems allows attackers to elevate their privileges to the root level.

The vulnerability of the dragonite component in Cisco IOS XE and Cisco IOS systems is related to security vulnerabilities in these operating systems. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

The vulnerability of the command-line interface (CLI) of Cisco IOS XE and Cisco IOS operating systems allows a attacker to obtain the password for the Common Industrial Protocol (CIP) and reconfigure the device.

The vulnerability of the command-line interface CLI of Cisco IOS XE and Cisco IOS operating systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to obtain the password for the Common Industrial Protocol CIP and reconfigure the...

CVE-2021-1381

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could...

CVE-2021-1352

A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of DECnet traffic that i...

CVE-2021-1443

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying operating system of an affected device. The vulnerability exists because the affected software improperly sanitizes values that are...