CVE-2019-1740 Cisco IOS and IOS XE Software Network-Based Application Recognition Denial of Service Vulnerabilities

A vulnerability in the Network-Based Application Recognition NBAR feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability are due to a parsing issue on DNS packets. An attacker could exploit...

CVE-2019-1741

CVE-2019-1741 affects Cisco IOS XE Software ETA (Encrypted Traffic Analytics). The flaw is a logic error in handling malformed incoming IP packets that can lead to access to a freed internal data structure, enabling an unauthenticated, remote attacker to cause a device reload and a DoS. Exploitat...

CVE-2019-1737

Cisco IOS and IOS XE IP SLA Denial of Service (CVE-2019-1737) arises from improper socket resources handling in the IP SLA responder, allowing an unauthenticated remote attacker to craft SLA packets and wedge an interface, leading to a DoS on affected devices. Affected products are Cisco IOS and ...

Cisco IOS XE Software Command Injection Vulnerability

A vulnerability in the Web Services Management Agent WSMA function of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary Cisco IOS commands as a privilege level 15 user. The vulnerability occurs because the affected software improperly sanitizes user-supplied...

Cisco IOS XE Software Command Injection Vulnerability

A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker who has...

PT-2019-1717 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the ISDN functions of the software could allow an unauthenticated, remote attacker to cause the device to reload. The issue is due to...

The vulnerability of the TFTP file transfer protocol implementation in Cisco IOS XR allows a hacker to disclose sensitive information.

The vulnerability of the TFTP file transfer protocol implementation in Cisco IOS XR operating systems is related to security flaws in the mechanisms used for protection. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2019-1681

A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...

Information disclosure

A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...

CVE-2019-1681

CVE-2019-1681 affects Cisco Network Convergence System 1000 Series IOS XR software. The root cause is improper validation of input in the TFTP service, enabling directory traversal to retrieve arbitrary files and cause information disclosure when the TFTP service is enabled. Affected releases are...

CVE-2019-1681 Cisco Network Convergence System 1000 Series TFTP Directory Traversal Vulnerability

A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...

Cisco IOS and Cisco IOS XE Software Secure Shell Server Access Control Error Vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. An Access Control Error vulnerability exists in the Secure Shell SSH server in Cisco IOS and Cisco IOS XE Software, which stems from a lack of program detection. An attacker could exploit the...

The vulnerability of Cisco IOS and Cisco IOS XE operating systems that use TACACS+ client authentication allows attackers to induce a service failure.

The vulnerability of Cisco IOS and Cisco IOS XE operating systems that use TACACS+ client authentication is related to errors in processing TACACS+ response packets. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot and a service failure...

CVE-2018-0484

CISCO IOS and IOS XE Software Secure Shell (SSH) has an access-control logic vulnerability that allows a VRF-sourced connection to reach the SSH service without the vrf-also keyword in the access-class, due to a missing check in the SSH server. An attacker could open an SSH session to an affected...

CVE-2018-0282

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block TCB state. While this...

Cisco IOS Access Points Software Denial of Service Vulnerability

Cisco IOS Access Points APs Software is a suite of software for management control of access point devices from Cisco USA. A security vulnerability exists in the 802.11r Fast Transition feature set in Cisco IOS APs Software. An attacker in close physical proximity could exploit this vulnerability...

CVE-2018-0441

A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a corruption of certain timer mechanisms triggered by...

CVE-2018-0441

A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a corruption of certain timer mechanisms triggered by...

The vulnerability of the MACsec Key Agreement implementation in the Cisco IOS XE operating system arises due to access control errors, allowing attackers to gain access to the network.

The vulnerability of the MACsec Key Agreement MKA protocol implementation in the Cisco IOS XE operating system is caused by access control errors. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and gain access to the network...

The vulnerability of the Cisco IOS XE operating system’s image file verification function arises from errors during the verification of the digital signatures of files uploaded to the device. This vulnerability allows attackers to install malicious software onto vulnerable devices.

The vulnerability of the Cisco IOS XE operating system’s image file verification function arises due to errors in verifying the digital signatures of the files uploaded to the device. Exploiting this vulnerability allows a malicious actor to install malware on vulnerable devices...