CVE-2020-3224

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to inject IOS commands to an affected device. The injected commands should require a higher privilege level in order to be executed. The...

CVE-2020-3222

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to bypass access control restrictions on an affected device. The vulnerability is due to the presence of a proxy service at a specific endpoint of the web UI. An...

CVE-2020-3211

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker who has valid...

CVE-2020-3205

A vulnerability in the implementation of the inter-VM channel of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs and Cisco 1000 Series Connected Grid Routers CGR1000 could allow an unauthenticated, adjacent attacker to execute arbitrary shell comman...

CVE-2019-16011

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to...

The vulnerability of the Border Gateway Protocol (BGP) implementation in the Cisco NX-OS operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the Border Gateway Protocol BGP implementation in the Cisco NX-OS operating system is related to the use of pre-installed configuration data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and accessibility of protected information...

The vulnerability of the command-line interface of the Cisco FXOS operating system, allowing a hacker to execute arbitrary commands

The vulnerability of the Cisco FXOS operating system’s command-line interface relates to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...

The vulnerability of the HTTP PROXY Server process on the Cisco IOS operating system allows a perpetrator to trigger a service failure.

The vulnerability of the HTTP PROXY Server process on the Cisco IOS operating system is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the implementation of the IPSec protocol set in the Cisco IOS XR operating system allows a attacker to trigger a service failure.

The vulnerability of the implementation of the IPSec protocol set in the Cisco IOS XR operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Border Gateway Protocol (BGP) implementation in Ethernet VPN technology of the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created Multicast Join...

The vulnerability of the Cisco IOS XE command-line interface allows a attacker to compromise the integrity of the protected information.

The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected information...

The vulnerability of the Application Layer Gateway (ALG) and the ZBFW network interface of the Cisco IOS XE operating system, which allows a attacker to trigger a reboot of the vulnerable device

The vulnerability of the Application Layer Gateway ALG and the ZBFW network firewall of the Cisco IOS XE operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a reboot of the vulnerable device...

The vulnerability of the Unified Threat Defense (UTD) function in the Cisco IOS XE operating system allows a attacker to trigger a reboot of the vulnerable device.

The vulnerability of the Unified Threat Defense UTD function in the Cisco IOS XE operating system is related to errors in packet processing for IPv6. Exploiting this vulnerability can allow a malicious actor to trigger a reboot of the vulnerable device through specially crafted IPv6 traffic...

The vulnerability in the implementation of the SXPv4 protocol for Cisco IOS and Cisco IOS XE operating systems allows a hacker to perform a system reboot on network equipment.

The vulnerability of the SXPv4 protocol for Cisco IOS and Cisco IOS XE operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, who operates remotely and has completed the authentication process, to trigger a reboot of network...

Vulnerability in the container of Cisco REST API virtual services for the Cisco IOS XE operating system, which allows a perpetrator to gain access to the target system with administrator privileges

The vulnerability in the container of Cisco’s API virtual services for operating systems running on Cisco IOS XE is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain access to the target system with administrator privileges by...

Cisco IOS and IOS XE IP Ident Denial of Service Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the Ident protocol handler in Cisco IOS and IOS XE, which arises from the program's failure to properly handle memory structures. A remote attacker could cau...

Cisco IOS and IOS XE HTTP Client Resource Management Error Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A resource management error vulnerability exists in the HTTP client functionality in Cisco IOS and IOS XE, which arises from a program that does not take into account TCP port information when matching...

Cisco IOS XE ASIC Register Write Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. An ASIC register write vulnerability exists in the CLI of Cisco IOS XE. The vulnerability stems from improper input validation and authorization of specific commands that a user can execute in the CLI. An...

CVE-2019-12661

A vulnerability in a Virtualization Manager VMAN related CLI command of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root. The vulnerability is due to insufficient validation of...

CVE-2019-12717

A vulnerability in a CLI command related to the virtualization manager VMAN in Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. The vulnerability is due to insufficient validation of...