The vulnerability of the per-VLAN errdisable function in the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the per-VLAN errdisable function in the Cisco IOS XE operating system arises from the simultaneous execution using shared resources with incorrect synchronization “Race Condition”. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot and a...

The vulnerability of the message processing mechanism implemented through the Cluster Management Protocol allows a attacker to cause a service failure in Cisco IOS and Cisco IOS XE operating systems.

The vulnerability of the message processing mechanism based on the Cluster Management Protocol CMP in Cisco IOS and Cisco IOS XE operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger service failures using...

The vulnerability of the OSPFv3 protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.

The vulnerability of the OSPFv3 protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to errors in the packet processing mechanisms. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially crafted OSPFv3 Link-State...

CVE-2018-15376

A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The vulnerability is due to the...

Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the IPv6 processing code in Cisco IOS Software and IOS XE Software. A remote attacker could exploit this vulnerability by sending malicious Pv6...

Cisco IOS Software Precision Time Protocol Denial of Service Vulnerability

Cisco 2500 Series Connected Grid Switches are different models of switches from Cisco.IOS Software is a set of operating systems developed by Cisco for its network devices.Precision Time Protocol PTP is one of the high precision time synchronization protocol subsystems. Precision Time Protocol PT...

Cisco IOS/IOS XE Software Information Disclosure Vulnerability (CNVD-2018-16176)

Cisco IOS Software and IOS XE Software are both operating systems for Cisco network devices. Cisco IOS Software and Cisco IOS XE Software have an information disclosure vulnerability in the implementation of RSA encryption nonces that stems from the program not responding correctly to encryption...

The vulnerability of the IKE protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows attackers to gain access to protected information.

The vulnerability of the IKE protocol’s implementation in Cisco IOS and Cisco IOS XE operating systems is related to decoding errors in traffic. Exploiting this vulnerability can allow a malicious actor to gain access to session keys and decode traffic by sending specially crafted data packets to...

The vulnerability in the implementation of the Internet Key Exchange protocol (IKEv1) in Cisco IOS and IOS XE operating systems allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange IKEv1 protocol in Cisco IOS and IOS XE operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially crafted IKEv1 packets...

Cisco IOS Software Denial of Service Vulnerability (CNVD-2018-07320)

Cisco IOS Software is a set of operating systems developed by Cisco for its network devices. A resource management error vulnerability exists in the Login Enhancements Login Block feature of Cisco IOS Software. A remote attacker could exploit this vulnerability to cause a denial of service system...

Cisco IOS XE Software Elevation of Privilege Vulnerability (CNVD-2018-07305)

Cisco IOS XE Software is an operating system developed by Cisco for its network devices. An elevation of privilege vulnerability exists in the Web UI in Cisco IOS XE Software version 16.1.1, which originates from the program failing to reset the privilege level of each Web UI session. A remote...

Cisco IOS XE Software Override Access Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A security vulnerability exists in Cisco IOS XE Software version 16.x, which arises from the use of a default username and password for an account with level 15 privileges. A remote attacker could use this...

CVE-2018-0182

Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software, which could allow the attacker to gain access to the underlying Linux shell of an affected device and execute comman...

CVE-2018-0167

Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol LLDP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition or execute arbitrary code with elevated...

CVE-2018-0159

A vulnerability in the implementation of Internet Key Exchange Version 1 IKEv1 functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is...

CVE-2018-0152

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability exists because the affected software does not reset the privilege level for each web UI session. An...

CVE-2018-0165

A vulnerability in the Internet Group Management Protocol IGMP packet-processing functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust buffers on an affected device, resulting in a denial of service DoS condition, aka a Memory Leak. The vulnerability ...

CVE-2018-0163

A vulnerability in the 802.1x multiple-authentication multi-auth feature of Cisco IOS Software could allow an unauthenticated, adjacent attacker to bypass the authentication phase on an 802.1x multi-auth port. The vulnerability is due to a logic change error introduced into the code. An attacker...

PT-2018-1100 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the quality of service QoS subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker ...

CVE-2018-0123

A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to use certain diagnostic shell commands that can overwrite system files. These system files may be sensitive and should not be able to be overwritten by a user of...