Cisco ASR 5000 Series Software Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A denial of service vulnerability exists in Cisco ASR 5000 Series Software that allows attackers to send specially crafted SNMP messages to crash the SNMP process...

Cisco DLSw Information Disclosure Scanner

This module implements the DLSw information disclosure retrieval. There is a bug in Cisco's DLSw implementation affecting 12.x and 15.x trains that allows an unauthenticated remote attacker to retrieve the partial contents of packets traversing a Cisco router with DLSw configured and active. Modu...

CVE-2014-2178

Cross-site request forgery CSRF vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID...

Cisco 871 Integrated Services Router - Cross-Site Request Forgery Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/31218/info The Cisco 871 Integrated Services Router is prone to a cross-site request-forgery vulnerability. Successful exploits can run arbitrary commands on affected devices. This may lead to further network-based attack...

UPC Ireland Cisco EPC 2425 Router / Horizon Box

Exploit for hardware platform in category web applications The Cisco EPC 2425 routers supplied by UPC are vulnerable to an offline dictionary attack if the WPA-PSK handshake is obtained by an attacker. The WPA-PSK pass phrase has the following features: • Random • A to Z Uppercase only • 8...

Cisco IOS XE Version

The remote host is running IOS XE, an operating system for Cisco routers. Nessus was able to read the IOS XE version number via an SSH connection to the router or via SNMP. C Tenable, Inc. include"compat.inc"; if description scriptid67217; scriptversion"1.47";...

TFTP Attack - Cisco Router Config File Obtained via TFTP

Binary data 6213.prm...

CVE-2011-1645

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute...

CVE-2011-1646

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the 1 ping test parameter ...

snmp-ios-config NSE Script

Attempts to downloads Cisco router IOS configuration files using SNMP RW v1 and display or save them. Script Arguments snmp-ios-config.tftproot If set, specifies to what directory the downloaded config should be saved snmp.version See the documentation for the snmp library. creds.service,...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Router and Security Device Manager SDM allows remote attackers to inject arbitrary web script or HTML via unknown vectors, aka Bug ID CSCtb38467...

Cisco Router and Security Device Manager vulnerable to cross-site scripting

Overview Cisco Router and Security Device Manager SDM contains a cross-site scripting vulnerability. Cisco Router and Security Device Manager SDM is a web-based device management tool for Cisco routers. Cisco Router and Security Device Manager SDM contains a cross-site scripting vulnerability...

CVE-2008-4128

Multiple cross-site request forgery CSRF vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via 1 a certain "show privilege" command to the /level/15/exec/- URI, and 2 a certain "alias...

CVE-2008-4128

CVE-2008-4128 concerns Cisco IOS 12.4 on the 871 ISR, where multiple CSRF vulnerabilities in the HTTP Administration component can allow remote command execution via the show privilege command to /level/15/exec/- and the alias exec command to /level/15/exec/-/configure/http. Connected sources con...

PT-2008-5427

Name of the Vulnerable Software and Affected Versions Cisco IOS version 12.4 on the 871 Integrated Services Router Description The issue allows remote attackers to execute arbitrary commands. This is achieved through cross-site request forgery CSRF vulnerabilities in the HTTP Administration...

Cisco Router HTTP Administration CSRF Command Execution Exploit 2

Exploit for hardware platform in category remote exploits ================================================================= Cisco Router HTTP Administration CSRF Command Execution Exploit 2 ================================================================= 0day.today 2018-03-01...

Cisco Router - HTTP Administration Cross-Site Request Forgery Command Execution (2)

Cisco Router - HTTP Administration Cross-Site Request Forgery Command Execution 2 milw0rm.com 2008-09-17...

Attacking cisco router-bug warning-the black bar safety net

In you see Before you need to know: －what is IP address?－ What is ISP for?－ What is the TCP/IP data package?－ How to hide your IP address?－ How to use Telnet in?－ How to use HyperTerminal for?－ How to use Ping for?－ How to use TraceRoute it?－ How to use a proxy server?...

Cisco Password Bruteforcer Exploit

No description provided by source. / .: free source :. .: coded 4 Avatar Corp :. enabler. cisco internal bruteforcer. coder - norby concept - anyone this program just logs into a CISCO router and tries a list of passes looking for the enable one. it works in password-only CISCO as well in...

CVE-2006-3595

The default configuration of IOS HTTP server in Cisco Router Web Setup CRWS before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190...