CVE-2020-3118

A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisc...

CVE-2020-3118 Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability

A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisc...

CVE-2020-3118

CVE-2020-3118 is a Cisco CDP format-string vulnerability in Cisco IOS XR CDP handling. The issue arises from improper validation of string input in CDP messages, enabling an unauthenticated, adjacent attacker to potentially execute arbitrary code with administrative privileges or cause a reload v...

CVE-2020-3118 Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability

A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisc...

PT-2020-1610 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Cisco Discovery Protocol implementation could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected...

CVE-2020-3118 (AKA: CDPwn)

A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisc...

Cisco IOS XE Software SM-1T3/E3 Service Module DoS (cisco-sa-20180926-sm1t3e3)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the SM-1T3/E3 firmware due to improper handling of user input. A remote, unauthenticated attacker can exploit this, by first connecting to the SM-1T3/E3 module console and enterin...

Cisco Discovery Protocol (CDP) enabled devices are vulnerable to denial-of-service and remote code execution

Overview Cisco Discovery Protocol CDP is a proprietary layer-2 networking protocol that Cisco devices use to gather information about devices connected to the network. Armis Security found that CDP supported devices are vulnerable to heap overflow in Cisco IP Cameras CVE-2020-3110, stack overflow...

Cisco IOS VPN Enabled Detection

Binary data ciscoiosvpndetect.nbin...

The vulnerability of the Border Gateway Protocol (BGP) implementation in Ethernet VPN technology of the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created Multicast Leav...

The vulnerability of the BGP protocol implementation in Cisco IOS XR allows a attacker to cause a service failure.

The vulnerability of the BGP protocol implementation in Cisco IOS XR exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the BGP protocol implementation in Cisco IOS XR allows a attacker to cause a service failure.

The vulnerability of the BGP protocol implementation in Cisco IOS XR lies in errors in the processing of BGP messages. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco IOS XR Software netconf DoS (cisco-sa-20180502-iosxr)

According to its self-reported version, Cisco IOS XR Software is affected by a denial of service DoS vulnerability in the netconf interface due to improper handling of malformed requests. An unauthenticated, remote attacker can exploit this, by sending malicious requests to the affected software,...

Cisco IOS XR Software Border Gateway Protocol DoS (cisco-sa-20181003-iosxr-dos)

According to its self-reported version, Cisco IOS XR Software is affected by a denial of service DoS vulnerability in its implementation of the Border Gateway Protocol BGP. This is due to incorrect processing of certain BGP update messages. An unauthenticated, remote attacker can exploit this, by...

CVE-2019-16022

Multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerabilities are due to incorrect processing of BGP update...

CVE-2019-16020

Multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerabilities are due to incorrect processing of BGP update...

CVE-2019-16020

Multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerabilities are due to incorrect processing of BGP update...

CVE-2019-15989

A vulnerability in the implementation of the Border Gateway Protocol BGP functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of a BGP update message that contains a...

CVE-2019-15989

A vulnerability in the implementation of the Border Gateway Protocol BGP functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of a BGP update message that contains a...

Design/Logic Flaw

A vulnerability in the implementation of the Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service DoS condition in the ISIS process. The vulnerability is due to improper...