Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Ios

CVE-2017-6736 / cisco-sa-20170629-snmp Cisco IOS remote code exe...

Cisco IOS - Remote Code Execution

Cisco IOS - Remote Code Execution !/usr/bin/env python if False: ''' CVE-2017-6736 / cisco-sa-20170629-snmp Cisco IOS remote code execution =================== This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability in SNMP service disclosed by Cisco...

Cisco IOS 12.2 < 12.4 / 15.0 < 15.6 - Security Association Negotiation Request Device Memory E

Exploit for hardware platform in category remote exploits !/usr/bin/python -- coding: utf8 -- import socket from scapy.all import --------------------------- Requirements: $ sudo pip install scapy --------------------------- conf.verb = 0 RCVSIZE = 2548 TIMEOUT = 6 payload =...

Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2017-36400)

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A denial of service vulnerability exists in the Local Packet Transport Services LPTS ingress frame handling feature in...

CVE-2017-12355

A vulnerability in the Local Packet Transport Services LPTS ingress frame-processing functionality of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause one of the LPTS processes on an affected system to restart unexpectedly, resulting in a brief denial of service DoS...

Race condition

A vulnerability in the Local Packet Transport Services LPTS ingress frame-processing functionality of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause one of the LPTS processes on an affected system to restart unexpectedly, resulting in a brief denial of service DoS...

Cisco IOS and IOS XE Software IOS daemon cross-site scripting vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices.IOS daemon IOSd is one of the IOS daemons. A cross-site scripting vulnerability exists in the web-based management interface of IOSd in Cisco IOS and IOS XE Software, which stems from the program...

CVE-2017-12304

A vulnerability in the IOS daemon IOSd web-based management interface of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface on an affected device. The vulnerability is due ...

PT-2017-4193 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software versions prior to 16.3 Description: A vulnerability in the Border Gateway Protocol BGP over an Ethernet Virtual Private Network EVPN for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the...

The vulnerability of the REST API interface of the Cisco IOS XE operating system allows a perpetrator to bypass authentication procedures and gain access to the web interface.

The vulnerability of the REST API interface of the Cisco IOS XE operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and gain access to the web interface by sending a specially crafted API...

The vulnerability of the implementation of the Common Industrial Protocol (CIP) in the Cisco IOS operating system allows a attacker to trigger a Denial-of-Service Attack (DoS) and cause the device to restart.

The vulnerabilities of the Cisco IOS operating system’s implementation of the Common Industrial Protocol CIP exist due to insufficient validation of input data during the processing of CIP packets. Exploiting these vulnerabilities can allow a malicious actor to trigger a device restart and a...

Cisco IOS XE Software Information Disclosure Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A local information disclosure vulnerability exists in the IPsec feature of Cisco IOS XE Software. An attacker could exploit the vulnerability to obtain sensitive information...

CVE-2017-12289

A vulnerability in conditional, verbose debug logging for the IPsec feature of Cisco IOS XE Software could allow an authenticated, local attacker to display sensitive IPsec information in the system log file. The vulnerability is due to incorrect implementation of IPsec conditional, verbose debug...

Cross site scripting

A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameter...

CVE-2017-12272

A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameter...

Cisco IOS Cluster Management Protocol Telnet Option Handling RCE (cisco-sa-20170317-cmp) (destructive check)

The remote device is affected by a remote code execution vulnerability in the Cluster Management Protocol CMP subsystem due to improper handling of CMP-specific Telnet options. An unauthenticated, remote attacker can exploit this by establishing a Telnet session with malformed CMP-specific telnet...

Cisco IOS XE Line Card Console Access Vulnerability (cisco-sa-20170927-cc)

According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by a local privilege escalation vulnerability. An unauthenticated attacker, with physical access, can exploit this vulnerability to gain access to an affected devices'...

Cisco IOS Software Plug-and-Play PKI API Certificate Validation Vulnerability

According to its self-reported version, the IOS is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco IOS XE Software Locator/ID Separation Protocol Authentication Bypass Vulnerability

According to its self-reported version, the Cisco IOS XE Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Design/Logic Flaw

A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition when the emsd service stops. The vulnerability is due to the software's inability to...