The vulnerability of the Layer 2 Traceroute tool for Cisco IOS XE and Cisco IOS operating systems allows a hacker to create a complete L2 topology of a vulnerable network.

The vulnerability of the Layer 2 Traceroute tool for Cisco IOS XE and Cisco IOS operating systems is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely construct a complete L2 topology of the vulnerable network...

The vulnerability of the Image Verification function in the Cisco IOS XE operating system allows a perpetrator to install malware onto a vulnerable device or upload malicious executable files.

The vulnerability of the Image Verification function in the Cisco IOS XE operating system is related to the lack of verification of file signatures during the system’s loading process. Exploiting this vulnerability allows a perpetrator to install malware onto a vulnerable device or load malicious...

The vulnerability of the virtualization manager in Cisco IOS XR operating systems allows a attacker to execute arbitrary commands in the Linux base operating system with root privileges.

The vulnerability of the virtualization manager in Cisco IOS XR operating systems exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the Linux base...

Vulnerability of the HTTP client function in Cisco IOS and Cisco IOS XE operating systems, allowing attackers to read or modify arbitrary data

The vulnerability of the HTTP client function in Cisco IOS and Cisco IOS XE operating systems lies in the fact that information about the TCP port is not considered when comparing new requests with existing persistent HTTP connections. Exploiting this vulnerability allows a remote attacker to rea...

Cisco IOS XE Software Path Traversal Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the Guest Shell. The vulnerability could allow an authenticated, local attacker to perform directory traversal on the base Linux operating system of Cisco IOS XE Software. The vulnerability is due to...

The vulnerability lies in the implementation of the SIP protocol and the NAT function of the Application Layer Gateway (ALG) of the Cisco IOS XE operating system. This allows a attacker to trigger a reboot of the vulnerable device.

The vulnerability of the SIP protocol implementation and the NAT function of the Application Layer Gateway ALG on the Cisco IOS XE operating system is related to errors in processing SIP packets. Exploiting this vulnerability allows a malicious actor to trigger a restart of the vulnerable device ...

The vulnerability in the configuration of file system permissions in Cisco IOS XE allows a attacker to circumvent container protection and gain access to arbitrary files.

The vulnerability of a network operating system’s file system configuration related to Cisco IOS XE lies in the lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to circumvent container protection and gain access to arbitrary files...

The vulnerability of the Cisco TrustSec (CTS) network security management system for the Cisco IOS XE operating system allows a attacker to trigger a service failure.

The vulnerability of the Cisco TrustSec CTS network security management system for the Cisco IOS XE operating system is related to errors during the verification of attributes in RADIUS messages. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the virtualization manager in Cisco IOS XE, allowing a attacker to execute arbitrary commands in the Linux kernel with root privileges.

The vulnerability of the virtualization manager in Cisco IOS XE operating systems exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the Linux base...

Cisco IOS XE Software Unified Threat Defense Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information TRUSTED...

The vulnerability of the input packet processing function in the Cisco IOS operating system allows a hacker to trigger a service failure.

The vulnerability of the input processing function in the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability in the Web UI of the Cisco IOS XE operating system, which allows a hacker to execute arbitrary commands with elevated privileges

The vulnerability of the Cisco IOS XE operating system’s Web UI is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges remotely...

The vulnerability in the implementation of the Identification protocol for Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to trigger a reboot of a vulnerable device.

The vulnerability of the Cisco IOS and Cisco IOS XE operating system identification protocol implementations is related to the assignment of a zero pointer. Exploiting this vulnerability can allow an attacker to remotely trigger a reboot of the vulnerable device...

Cisco IOS XE Command Injection Vulnerability (CNVD-2019-34374)

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A command injection vulnerability exists in the web-based user interface of Cisco IOS XE, which can be exploited to execute Cisco IOS commands with elevated privileges level 15 via...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2019-36642)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the files of Cisco IOS XE. The vulnerability stems from ineffective management of the underlying file system resources. An attacker cou...

Cisco IOS XE ISDN Data Leakage Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. A data leakage vulnerability exists in the Dialer interface feature for ISDN connections in Cisco IOS XE for Cisco 4000 Series Integrated Services Routers. The vulnerability stems from insufficient validation o...

Cisco IOS XE Consent Token Bypass Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. A consent token bypass vulnerability exists in the CLI of Cisco IOS XE. The vulnerability stems from insufficient enforcement of consent tokens in authorized Shell access. An attacker could exploit this...

Cisco IOS XE CTS PAC Configuration Denial of Service Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the Cisco TrustSec CTS Protected Access Credentials PAC configuration module of Cisco IOS XE. The vulnerability stems from improper validation of attributes in RADIUS...

CVE-2019-12659

A vulnerability in the HTTP server code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the HTTP server to crash. The vulnerability is due to a logical error in the logging mechanism. An attacker could exploit this vulnerability by generating a high amount of...

CVE-2019-12668

A vulnerability in the web framework code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of the affected software using the banner parameter. The vulnerability is due to...