Cisco IOS XE SD-WAN DoS (cisco-sa-sdwan-dosmulti-48jJuEUP)

According to its self-reported version, Cisco IOS XE SD-WAN Software is affected by a denial of service DoS vulnerability in the UDP connection response due the presence of a null dereference in vDaemon. An unauthenticated, remote attacker can exploit this, by sending crafted traffic to an affect...

Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family WLAN Local Profiling DoS (cisco-sa-dclass-dos-VKh9D8k3)

According to its self-reported version, Cisco IOS XE is affected by a Denial of Service vulnerability in the WLAN Local Profiling feature of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family. This vulnerability is due to incorrect parsing of HTTP packets while performin...

The vulnerability of the authentication function of the Cisco IOS XE operating system’s web server allows a hacker to cause a malfunction in the web server’s operation.

The vulnerability of the Cisco IOS XE operating system’s server authentication function is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to cause malfunctions in the server...

The vulnerability of the Lua interpreter used in Cisco IOS XE operating systems allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the Lua interpreter used in Cisco IOS XE operating systems is related to insufficient restrictions on function calls. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

The vulnerability affects the implementation of the multi-protocol border gateway protocol (MP-BGP) for L2VPN and Ethernet VPN (EVPN) in Cisco IOS and Cisco IOS XE operating systems. This vulnerability allows a attacker to cause service interruptions.

The vulnerability of the MP-BGP protocol for L2VPN and Ethernet VPN EVPN in Cisco IOS and Cisco IOS XE operating systems is related to errors in processing BGP update messages. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family Improper Access Control (cisco-sa-ewlc-icmpv6-qb9eYyCR)

According to its self-reported version, Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Routers is affected by an improper access control vulnerability due to an incomplete access control list ACL being applied prior to RUN state. An attacker could exploit this...

Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family WPA Denial of Service (cisco-sa-wpa-dos-cXshjerc)

According to its self-reported version, IOS-XE is affected by a Denial of Service vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family and could allow an unauthenticated, adjacent attacker to cause denial of...

Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation (cisco-sa-iox-usb-guestshell-WmevScDj)

According to its self-reported version, IOS-XE is affected by a privilege escalation vulnerability due to a vulnerability in the file system on the pluggable USB 3.0 Solid State Drive SSD. An attacker could exploit this vulnerability by removing the USB 3.0 SSD, modifying or deleting files on the...

Cisco IOS Access Points DoS (cisco-sa-20190717-aironet-dos)

A denial of service DoS vulnerability exists in Cisco IOS Access Points due to a lack of complete error handling condition for client authentication requests sent to a targeted interface configured for FT. An unauthenticated, adjacent attacker can exploit this issue, by sending crafted...

The vulnerability of the Preboot eXecution Environment (PXE) of the Cisco IOS XR operating system allows a hacker to execute arbitrary code.

The vulnerability of the Preboot eXecution Environment PXE of the Cisco IOS XR operating system is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Cisco IOS XR Software for ASR 9000 Series Slow Path Forwarding DoS (cisco-sa-xr-cp-dos-ej8VB9QY)

According to its self-reported version, IOS-XR is affected by a denial of service DoS vulnerability in the ingress packet processing function due to improper resource allocation when processing network traffic in software switching mode punted. An unauthenticated, remote attacker can exploit this...

CVE-2020-3284

A vulnerability in the enhanced Preboot eXecution Environment PXE boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS and runs over the...

Design/Logic Flaw

A vulnerability in the enhanced Preboot eXecution Environment PXE boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS and runs over the...

CVE-2020-3284 Cisco IOS XR Software Enhanced Preboot eXecution Environment Unsigned Code Execution Vulnerability

A vulnerability in the enhanced Preboot eXecution Environment PXE boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS and runs over the...

EulerOS Virtualization 3.0.6.6 : PyYAML (EulerOS-SA-2020-2475)

According to the versions of the PyYAML package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco IOS ...

Cisco IOS XR RCE (cisco-sa-iosxr-pxe-unsign-code-exec-qAa78fD2)

According to its self-reported version, IOS-XR is affected by a remote code execution vulnerability in the enhanced Preboot eXecution Environment PXE boot loader due to a failure to verify commands issued during a network boot. An unauthenticated, remote attacker can exploit this to execute...

The vulnerability of the application deployment subsystem of the Cisco IOS XE operating system allows a hacker to elevate their privileges to the root level.

The vulnerability of the application deployment subsystem in Cisco IOS XE is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

Vulnerability fixed in Cisco IOS XR

A vulnerability in the Preboot eXecution Environment PXE bootloader for Cisco IOS XR 64-bit software could allow an unauthenticated, remote malicious agent to execute execute unsigned code during the PXE boot process on an affected device. The PXE bootloader is part of the BIOS and is executed...

The vulnerability of the IP traffic processing function in Cisco IOS XE routers with integrated Cisco services series 4461 allows a attacker to cause a service failure.

The vulnerability of the IP traffic processing function in Cisco IOS XE routers with integrated Cisco services from the 4461 series is related to errors in traffic processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in the Cisco IOS XE operating system for Cisco Catalyst 9800 wireless controller and Catalyst 9100 access points is related to errors in processing input data. Exploiting this vulnerability can allow...