Cisco IOS XE Software Information Disclosure (cisco-sa-info-disclosure-V4BmJBNF)

According to its self-reported version, IOS XE is affected by a information disclosure vulnerability. An authenticated, local attacker to access files from the flash: filesystem due to insufficient application of restrictions during the execution of a specific command. Please see the included Cis...

Cisco IOS XE Software Privilege Escalation Multiple Vulnerabilities (cisco-sa-ios-webui-priv-esc-K8zvEWM)

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges on an affected device. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco IOS XE Software Arbitrary Code Execution (cisco-sa-ios-lua-rce-7VeJX4f)

According to its self-reported version, Cisco IOS XE Software is affected by an arbitrary code execution vulnerability in its Lua interpreter due to insufficient permission checks on Lua function calls. An authenticated, local attacker can exploit this to bypass authentication and execute arbitra...

Cisco IOS XE Software Guest Shell Unauthorized File System Access (cisco-sa-unauth-file-access-eBTWkKVW)

According to its self-reported version, Cisco IOS XE Software is affected by an unauthorized file system access vulnerability in its guest shell component due to insufficient file system permissions. An authenticated, local attacker could exploit this, to view or modify restricted information or...

Cisco Smart Install (SMI) Protocol Detection (TCP)

TCP based detection of services supporting the Cisco Smart Install SMI protocol. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Issues Patches For 2 High-Severity IOS XR Flaws Under Active Attacks

Cisco yesterday released security patches for two high-severity vulnerabilities affecting its IOS XR software that were found exploited in the wild a month ago. Tracked as CVE-2020-3566 and CVE-2020-3569 , details for both zero-day unauthenticated DoS vulnerabilities were made public by Cisco lat...

Cisco IOS XE Software Web UI Authorization Bypass (cisco-sa-webui-auth-bypass-6j2BYUc7)

According to its self-reported version, Cisco IOS XE Software is affected by a Web UI authorization bypass vulnerability due to insufficient authorization of web UI access requests. An authenticated, remote attacker could exploit this vulnerability by sending a crafted HTTP request to the web UI....

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43446)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the DHCP message handler of the Cisco IOS XE used by the Cisco cBR-8 Converged Broadband Router, which can be exploited by an attacker ...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43456)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in the packet processing of Cisco IOS XE used by the Cisco 4461 Integrated Multiservice Router, which can be exploited by an attacker to...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43452)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in Cisco IOS XE's Control and Configuration of Access Points over Wireless CAPWAP protocol processing used by the Cisco Catalyst 9800 seri...

Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2021-43447)

Cisco IOS and IOS XE are both operating systems developed by Cisco in the United States for its network devices. A denial of service vulnerability exists in the PROFINET handler for Link Layer Discovery Protocol LLDP messages in Cisco IOS and IOS XE, which can be exploited by an attacker to cause...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43441)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in the Umbrella Connector component of Cisco IOS XE used in Cisco Catalyst 9200 series switches, which can be exploited by an attacker by...

Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2021-43444)

Cisco IOS and IOS XE are both operating systems developed by Cisco in the United States for its network devices. A denial of service vulnerability exists in the ISDN subsystem of Cisco IOS and IOS XE, which can be exploited by an attacker to cause a process crash by sending a malicious ISDN Q.931...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43449)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in the WLAN local analysis feature of Cisco IOS XE used in the Cisco Catalyst 9000 series, which can be exploited by an attacker to cause...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43445)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in the wireless client Simple Network Management Protocol SNMP trap generation of the Cisco IOS XE used by the Cisco Catalyst 9000 series,...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43440)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in Cisco IOS XE, which can be exploited by an attacker to cause the device to reload by sending Ethernet frames to the Ethernet segment...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43453)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in Cisco IOS XE's Control and Configuration of Access Points over Wireless CAPWAP protocol processing used by the Cisco Catalyst 9800 seri...

Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2021-43438)

Cisco IOS and IOS XE are both operating systems developed by Cisco in the United States for its network devices. A denial of service vulnerability exists in the Split DNS feature of Cisco IOS and IOS XE, which can be exploited by an attacker to cause a device to reload by attempting to resolve th...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43457)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in the Common Open Policy Services COPS engine of Cisco IOS XE used by the Cisco cBR-8 Converged Broadband Router, which can be exploited ...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43451)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in Cisco IOS XE's Control and Configuration of Access Points over Wireless CAPWAP protocol processing used by the Cisco Catalyst 9800 seri...