Cisco NX-OS Denial of Service Vulnerability (CNVD-2020-50555)

Cisco NX-OS Software is a set of data center-grade operating system software for switches from Cisco.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream-based transport layer communication protocol defined by IETF RFC 793. 793. A security vulnerability exists in the...

The vulnerability of the Cisco IOS operating system, related to resource release errors, allows a intruder to trigger a service failure.

The vulnerability of the Cisco IOS operating system is related to resource release errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending broadcast packets...

The vulnerability of the Cisco IOS XR operating system’s access control list implementation allows a attacker to gain access to a device through the processor-based management interface of the backup route.

The vulnerability of the Cisco IOS XR operating system’s access control list implementation is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the device through the processor-based management interface of...

The vulnerability of the 802.1X standard implementation in Cisco IOS operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the 802.1X standard implementation in Cisco IOS exists due to errors in handling broadcast traffic. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Cisco IOS XE operating system, related to errors in checking the content provided by users, allows a hacker to elevate their privileges to the root level.

The vulnerability of the Cisco IOS XE operating system is related to errors during the verification of content provided by users. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

The vulnerability of the IEEE 802.11w Protected Management Frames (PMFs) in the Cisco IOS XE operating system allows a hacker to disrupt a user’s legitimate connection to a vulnerable device.

The vulnerability of the IEEE 802.11w Protected Management Frames PMFs in the Cisco IOS XE operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to successfully disconnect a user’s connection to a vulnerable device...

The vulnerability of the Internet Key Exchange version 2 (IKEv2) function in Cisco IOS and Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the Internet Key Exchange version 2 IKEv2 function in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability in the implementation of the channel between virtual machines of the Cisco IOS operating system arises from insufficient validation of input data. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the implementation of the channel between virtual machines of the Cisco IOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability in the Cisco IOS XE operating system’s web interface, related to insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, or accessibility of protected information.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, or accessibility of protected information...

The vulnerability of the Cisco IOS XE operating system, related to the lack of measures taken to clean data at the management level, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the Cisco IOS XE operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

The vulnerability of the Locally Significant Certificate (LSC) management mechanism in the Cisco IOS XE operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Locally Significant Certificate LSC management mechanism in the Cisco IOS XE operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to trigger a service failure.

The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Cisco IOS XE operating system’s image verification function, related to errors in verifying the cryptographic signature, allows a hacker to install malicious software.

The vulnerability of the Cisco IOS XE operating system’s image file verification function is related to errors in the cryptographic signature verification process. Exploiting this vulnerability could allow a perpetrator to install malicious software...

Cisco 809 Industrial ISRs, 829 Industrial ISRs, and Cisco 1000 Series Connected Grid Routers IOS Software Command Injection Vulnerability

Cisco IOS is the United States Cisco Cisco company's set of operating system developed for its network equipment. A command injection vulnerability exists in IOS Software in Cisco 809 Industrial ISRs, 829 Industrial ISRs, and Cisco 1000 Series Connected Grid Routers CGR1000, which stems from the...

Cisco IOS and IOS XE Input Validation Error Vulnerability (CNVD-2020-31827)

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation error vulnerability exists in the Tool Command Language Tcl parser in Cisco IOS Software and Cisco IOS XE Software, which stems from a lack of validation of input data. An attacker...

Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers IOS XE Data Forgery Issue Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A data forgery vulnerability exists in Cisco IOS XE IPsec VPN in Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers, which arises from the...

Multiple Cisco Products Input Validation Error Vulnerability (CNVD-2020-31994)

Cisco 809 Industrial Integrated Services Routers are products of Cisco Corporation.Cisco 809 Industrial Integrated Services Routers are industrial integrated multi-service routers.Cisco 829 Industrial Integrated Services Routers are industrial integrated multi-service routers.Cisco 1000 Series...

Cisco IOS and IOS XE Input Validation Error Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation error vulnerability exists in the implementation of IKEv2 in Cisco IOS Software and Cisco IOS XE Software, which stems from the program's failure to properly handle specially crafte...

Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2020-31826)

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A security vulnerability exists in the Secure Shell SSH server code in Cisco IOS Software and Cisco IOS XE Software, which stems from the SSH state machine not properly representing internal state. An...

Cisco IOS and IOS XE Input Validation Error Vulnerability (CNVD-2020-31975)

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation error vulnerability exists in the implementation of the CIP feature in Cisco IOS Software and Cisco IOS XE Software, which stems from the program's failure to adequately handle...