Code injection

The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service device reload via crafted image list parameters in a Smart Install packet, aka Bug ID CSCuv45410...

CVE-2016-1351

CVE-2016-1351 affects Cisco IOS (15.1/15.2) and NX-OS (4.1–6.2) where the Locator/ID Separation Protocol (LISP) is implemented. The root cause is improper input validation of LISP headers, allowing remote unauthenticated attackers to cause a denial of service (device reload) via a crafted UDP hea...

CVE-2016-1344

The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service device reload via fragmented packets, aka Bug ID CSCux38417...

CVE-2016-1366

The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service overwrite via unspecified vectors, aka Bug ID CSCuw75848...

CVE-2016-1366

The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service overwrite via unspecified vectors, aka Bug ID CSCuw75848...

CVE-2016-1366

The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service overwrite via unspecified vectors, aka Bug ID CSCuw75848...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities could allow a remote attacker to create a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply...

CVE-2016-1361

Cisco IOS XR through 4.3.2 on Gigabit Switch Router GSR 12000 devices does not properly check for a Bidirectional Forwarding Detection BFD header in a UDP packet, which allows remote attackers to cause a denial of service line-card restart via a crafted packet, aka Bug ID CSCuw56900...

Code injection

Cisco IOS XR through 4.3.2 on Gigabit Switch Router GSR 12000 devices does not properly check for a Bidirectional Forwarding Detection BFD header in a UDP packet, which allows remote attackers to cause a denial of service line-card restart via a crafted packet, aka Bug ID CSCuw56900...

Cisco IOS Denial of Service Vulnerability (CNVD-2016-01211)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in Cisco IOS 15.53M and 15.61T0a on Cisco 1000 Connected Grid routers, which can be exploited by an attacker to cause a denial of service...

CVE-2016-1333

Cisco IOS 15.53M and 15.61T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service device reload via an SNMP request for unspecified BRIDGE MIB OIDs, aka Bug ID CSCux89878...

Cisco IOS Denial of Service Vulnerability (CNVD-2016-01126)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in the implementation of Cisco IOS 15.24E on Industrial Ethernet 2000 devices, which can be exploited by a remote attacker to cause a device reload an...

Cisco IOS Software for Cisco Industrial Ethernet 2000 Series Switches Denial of Service Vulnerability

A vulnerability in the processing of Cisco Discovery Protocol CDP packets by Cisco IOS Software for Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to improper processing of crafted CD...

Cisco IOS XR Detection Consolidation

Consolidation of Cisco IOS XR detections. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.105532"...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system does not limit the number of PCE elements used for OSPF LSA updates. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco IOS XE Source MAC Address DoS (CSCux48405)

According to its self-reported version, the Cisco IOS XE software running on the remote device is Release 16.1.1. It is, therefore, affected by a denial of service vulnerability due to incorrect processing of packets that have 0000:0000:0000 as a source MAC address. An unauthenticated, adjacent...

CVE-2015-6432

Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements PCEs for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service device reload via a crafted update, aka Bug ID...

Cisco IOS and IOS XE Software IKEv1 State Machine Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in the IKEv1 state machine of Cisco IOS and Cisco IOS XE Software. An unauthenticated, remote attacker sending spoofed IKEv1 packets to the endpoint o...

Design/Logic Flaw

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service IPsec connection termination via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236...

CVE-2015-6429

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service IPsec connection termination via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236...