Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Cisco Ios

About 这个github仓库，是eqgrp-free-file.tar.xz 的免费解压版本， 源文件由“The Shadow Brokers”黑客组织放出。 加密的拍卖版本可以在网上找到和下载。 Firewall 这个文件夹包含了所有的源文件。 listing.txt则是所有文件的清单。 This repository contains the decrypted and decompressed contents of the eqgrp-free-file.tar.xz file released by "The Shadow Brokers". The contents ar...

The vulnerability of the DECnet Phase IV and DECnet/OSI operating systems of Cisco IOS XE allows a attacker to cause a service failure or trigger a device restart.

The vulnerability of the DECnet Phase IV and DECnet/OSI operating systems of Cisco IOS XE exists due to insufficient testing of incoming traffic. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service failure...

The vulnerability of the Address Resolution Protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.

The vulnerability of the Address Resolution Protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the dragonite component in Cisco IOS XE and Cisco IOS operating systems allows attackers to elevate their privileges to the root level.

The vulnerability of the dragonite component in Cisco IOS XE and Cisco IOS systems is related to security vulnerabilities in these operating systems. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

The vulnerability of the command-line interface (CLI) of Cisco IOS XE and Cisco IOS operating systems allows a attacker to obtain the password for the Common Industrial Protocol (CIP) and reconfigure the device.

The vulnerability of the command-line interface CLI of Cisco IOS XE and Cisco IOS operating systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to obtain the password for the Common Industrial Protocol CIP and reconfigure the...

CVE-2021-1381

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could...

CVE-2021-1352

A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of DECnet traffic that i...

CVE-2021-1443

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying operating system of an affected device. The vulnerability exists because the affected software improperly sanitizes values that are...

The vulnerability of the IPv6 traffic processing service of the Cisco IOS XR operating system allows a attacker to trigger a service failure.

The vulnerability of the IPv6 traffic processing service of the Cisco IOS XR operating system is related to errors in handling IPv6 traffic. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2021-1370

A vulnerability in a CLI command of Cisco IOS XR Software for the Cisco 8000 Series Routers and Network Convergence System 540 Series Routers running NCS540L software images could allow an authenticated, local attacker to elevate their privilege to root. To exploit this vulnerability, an attacker...

Multiple Cisco Products OS Command Injection Vulnerabilities

The Cisco 8000 Series Router and the Cisco Network Convergence System 540 Series Routers are both router devices from Cisco USA. An operating system command injection vulnerability exists in Cisco IOS XR on multiple Cisco routers. The vulnerability is due to insufficient validation of command lin...

The vulnerability of the command syntax analyzer in Cisco IOS and Cisco IOS XE operating systems allows a attacker to gain access to protected information.

The vulnerability of the command syntax analyzer in Cisco IOS and Cisco IOS XE operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst wireless network controllers and Catalyst 9100 access points allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in the Cisco IOS XE operating system on Cisco Catalyst wireless network controllers and Catalyst 9100 access points is related to errors in processing input data. Exploiting this vulnerability can...

Cisco IOS XR -bit Preboot eXecution Environment Access Control Error Vulnerability

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. A security vulnerability exists in the Cisco IOS XR 64-bit Preboot eXecution Environment, which can be exploited by an attacker to bypass restrictions via the Cisco IOS XR 64-bit...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in the Cisco IOS XE operating system for Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points is related to errors in processing input data. Exploiting this vulnerability can allow...

The vulnerability of the command-line interface of Telnet/Secure Shell (SSH) on the Cisco IOS XE operating system allows a malicious actor to execute commands with root privileges.

The vulnerability of the Telnet/Secure Shell SSH command-line interface of the Cisco IOS XE operating system is related to access control errors. Exploiting this vulnerability allows an attacker to execute commands with root privileges...

CVE-2020-3459

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this...

The vulnerability of the Cisco IOS XE operating system, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Umbrella Connector component in Cisco IOS XE software for Cisco Catalyst 9200 Series network devices allows a hacker to induce a service failure.

The vulnerability of the Umbrella Connector component in the Cisco IOS XE software for Cisco Catalyst 9200 Series network devices is related to incorrect error handling. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of Cisco IOS XE routers in the Cisco ASR 900 Series Aggregation Services Routers, related to the use of incorrect authentication schemes, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of Cisco IOS XE routers in the Cisco ASR 900 Series Aggregation Services Routers is related to the use of incorrect authentication schemes. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...