Cisco IOS XR Access Control Error Vulnerability (CNVD-2020-34297)

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. An access control error vulnerability exists in the ACL function of the alternate route processor management interface in Cisco IOS XR Software. A remote attacker could exploit this...

Cisco IOS XR Software Standby Route Processor Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability

A vulnerability in the access control list ACL functionality of the standby route processor management interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the standby route processor management Gigabit Ethernet Management...

Cisco IOS XE Software Privilege Escalation (cisco-sa-priv-esc2-A6jVRu7C)

According to its self-reported version, Cisco IOS XE Software is affected by Privilege Escalation vulnerability. An authenticated, local attacker to escalate their privileges to a user with root-level privileges due to insufficient validation of user-supplied content. This vulnerability could all...

Cisco IOS XE Software Privilege Escalation (cisco-sa-priv-esc3-GMgnGCHx)

According to its self-reported version, Cisco IOS XE Software is affected by a privilege escalation vulnerability. A vulnerability in the ROMMON of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to those of the root user of the underlying operating system...

Cisco IOS Software for Cisco Industrial Routers Virtual Device Server CLI Command Injection (cisco-sa-ios-iot-vds-cmd-inj-VfJtqGhE)

According to its self-reported version, IOS is affected by a vulnerability in the CLI parsers of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs and Cisco 1000 Series Connected Grid Routers CGR1000 could allow an authenticated, local attacker to...

The vulnerability of the CLI component of the Cisco IOS operating system, related to the lack of measures taken to clean data at the management level, allows a perpetrator to gain access to the system and execute arbitrary commands with root privileges.

The vulnerability of the Cisco IOS operating system’s CLI component is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to gain access to the system and execute arbitrary commands with root privileges...

The vulnerability of the Role-Based Access Control (RBAC) implementation in the Cisco IOS XE operating system allows a perpetrator to increase their privileges and execute arbitrary code.

The vulnerability of the Role-Based Access Control RBAC implementation in the Cisco IOS XE operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

The vulnerability in the Cisco IOS XE operating system’s web interface, related to insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, or accessibility of protected information.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, or accessibility of protected information...

The vulnerability of the SSH Secure Shell server of the Cisco IOS operating system, which allows a hacker to trigger a maintenance failure.

The vulnerability of the Cisco IOS operating system’s Secure Shell server is related to state management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability in the Cisco IOS XE operating system’s web interface, related to insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, or accessibility of protected information.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, or accessibility of protected information...

The vulnerability of the Cisco IOS XE operating system’s web interface, related to code errors, allows attackers to circumvent existing access restrictions.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions remotely...

Cisco IOx for IOS XE Software Privilege Escalation (cisco-sa-ioxPE-KgGvCAf9)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the authorization controls for the Cisco IOx application hosting infrastructure due to incorrect handling of requests for authorization tokens. An unauthenticated, remote attacker can exploit this, by...

Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Inter-VM Channel Command Injection (cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt)

According to its self-reported version, IOS is affected by a vulnerability in the implementation of the inter-VM channel due to insufficient validation of signaling packets that are destined to the Virtual Device Server VDS. An unauthenticated, adjacent attacker can exploit this, by sending...

Cisco IOS XE Software Web UI Command Injection (cisco-sa-webui-cmdinj-zM283Zdw)

According to its self-reported version, Cisco IOS XE Software is affected by a Web UI Command Injection vulnerability. The vulnerability exists in the web-based user interface due to improper validation of specific HTTP requests. An authenticated, remote attacker can exploit this, to inject IOS...

Cisco IOS XE Software Digital Signature Verification Bypass (cisco-sa-iosxe-digsig-bypass-FYQ3bmVq)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability due to an improper check on the area of code that manages the verification of the digital signatures of system image files during the initial boot process. An attacker could exploit this vulnerability by...

Cisco IOS XE Software Secure Shell DoS (cisco-sa-ssh-dos-Un22sd2A)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the Secure Shell SSH server code due to an internal state not being represented correctly in the SSH state machine, which leads to an unexpected behavior. An authenticated, remote attacker can exploit...

Cisco IOS XE Software Privilege License and Access Control Issues Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A privilege permission and access control issue vulnerability exists in ROMMON in Cisco IOS XE Software. An attacker can exploit this vulnerability by sending parameters to elevate...

Cisc IOS XE SD-WAN Software License Issue Vulnerability

Cisco IOS and IOS XE are both products of Cisco. the CLI is one of the command-line interfaces. the SD-WAN Software is one of the software-defined WAN software packages. An authorization issue vulnerability exists in Cisco IOS XE SD-WAN Software versions 16.9.1 through 16.10.1, which stems from a...

Cisco IOS XE Software Input Validation Error Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. An input validation error vulnerability exists in the Web UI in Cisco IOS XE Software, which arises from the program not properly validating user input. An attacker could exploit t...

CVE-2020-3258

Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs and Cisco 1000 Series Connected Grid Routers CGR1000 could allow an unauthenticated, remote attacker or an authenticated, local attacker to execute arbitrary code on an...