CVE-2019-12661

A vulnerability in a Virtualization Manager VMAN related CLI command of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root. The vulnerability is due to insufficient validation of...

CVE-2019-12717

A vulnerability in a CLI command related to the virtualization manager VMAN in Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. The vulnerability is due to insufficient validation of...

CVE-2019-12654

A vulnerability in the common Session Initiation Protocol SIP library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is due to insufficient sanity checks ...

The vulnerability of the IS-IS routing protocol implementation in Cisco IOS XR allows a attacker to cause a service failure.

The vulnerability of the IS-IS routing protocol implementation in Cisco IOS XR operating systems is related to errors in the processing of IS-IS protocol data packets. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2019-1918

A vulnerability in the implementation of Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS-IS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...

The vulnerability of the Precision Time Protocol (PTP) implementation in the Cisco IOS operating system allows a hacker to trigger a service failure.

The vulnerability of the Precision Time Protocol PTP implementation in the Cisco IOS operating system is related to errors in processing PTP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted PTP packets...

CVE-2019-1781

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI...

Cisco NX-OS Software and Cisco FXOS Software Denial of Service Vulnerabilities

Cisco NX-OS Software and Cisco FXOS Software are both products of Cisco, Inc.Cisco NX-OS Software is a suite of data center-grade operating system software for use in switches.Cisco FXOS Software is a suite of firewall software that runs in Cisco security appliances. Cisco FXOS Software is a set ...

The vulnerability of the implementation of the 802.1X standard in Cisco IOS operating systems allows a intruder to gain access to the network.

The vulnerability of the 802.1X standard implementation in Cisco IOS operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain access to the network...

The vulnerability in the web interface of the Cisco IOS XE operating system allows a hacker to make unauthorized changes to the file system and increase their privileges.

The vulnerability of the Cisco IOS XE operating system’s web interface exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make unauthorized changes to the file system and increase their privileges by loading and executing malicious files...

The vulnerability of the ISDN function implementations in Cisco IOS and Cisco IOS XE operating systems allows a intruder to trigger a service failure.

The vulnerability of ISDN operating system functions in Cisco IOS and Cisco IOS XE exists due to errors in processing certain values in the Q.931 elements. Exploiting this vulnerability can allow an attacker to trigger a device reboot, resulting in service failure...

The vulnerability of the message processing mechanism implemented through the Cluster Management Protocol (CMP) in Cisco IOS and Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the message processing mechanism based on the Cluster Management Protocol CMP in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger service failures using speciall...

The vulnerability of the function implementing the ACL mechanism in the Gigabit Ethernet Management component of the Cisco IOS XE operating system allows a attacker to compromise the integrity of the protected information.

The vulnerability of the function that implements the ACL mechanism in the Gigabit Ethernet Management component of the Cisco IOS XE operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...

CVE-2019-1760

A vulnerability in Performance Routing Version 3 PfRv3 of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this vulnerability by...

Cisco IOS and IOS XE Proxy Certificate Validation Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A certificate validation vulnerability exists in the Cisco Network Plug-and-Play PnP agent in Cisco IOS and IOS XE, which stems from the program's failure to adequately validate certificates, and can b...

Cisco IOS and IOS IP SLA Denial of Service Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A security vulnerability exists in the processing of IP Service Level Agreement packets in Cisco IOS and IOS XE. An attacker could exploit this vulnerability by sending specially crafted IP SLA packets...

Cisco IOS and IOS XE HSRP Information Disclosure Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A security vulnerability exists in the Hot Standby Router Protocol subsystem in Cisco IOS and IOS XE, which arises from a program's failure to adequately initialize memory. An attacker could exploit th...

Cisco IOS and IOS XE Input Validation Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the Network-Based Application Recognition NBAR feature in Cisco IOS and IOS XE, which stems from a parsing problem in the program that could be exploited by ...

Cisco IOS and IOS XE CMP Denial of Service Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the Cluster Management Protocol CMP handling code in Cisco IOS and IOS XE. An attacker could exploit this vulnerability by sending malicious CMP management...

Cisco IOS and IOS XE Access Control Error Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. An access control error vulnerability exists in the access control list feature of the Gigabit Ethernet management interface in Cisco IOS XE version 16.x, which can be exploited by...