CVE-2019-1918 Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability

A vulnerability in the implementation of Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS-IS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...

PT-2019-3068

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A vulnerability in the implementation of Intermediate System–to–Intermediate System IS–IS routing protocol functionality could allow an unauthenticated attacker who is in the sa...

CVE-2019-1918: Improper Input Validation

A vulnerability in the implementation of Intermediate System–to–Intermediate System IS–IS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS-IS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...

CVE-2019-1910: Improper Input Validation

A vulnerability in the implementation of the Intermediate System–to–Intermediate System IS–IS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS–IS area to cause a denial of service DoS condition. The vulnerability is due to...

Cisco IOS Software Network Plug-and-Play Agent Certificate Validation Vulnerability

According to its self-reported version, the installed Cisco IOS software is affected by a vulnerability in the Cisco Network Plug-and-Play PnP agent. This vulnerability allows an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability exists because the...

Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by a cross-site request forgery CSRF, which exists in the web UI of the affected device. A remote attacker can exploit this to perform arbitrary actions with the privilege level of the affected user. Please see the included...

CVE-2019-1920

A vulnerability in the 802.11r Fast Transition FT implementation for Cisco IOS Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected interface. The vulnerability is due to a lack of complete error handling condition...

PT-2019-2789

Name of the Vulnerable Software and Affected Versions Cisco IOS Access Points APs Software affected versions not specified Description The issue is related to insufficient input validation in the 802.11r Fast Transition implementation of Cisco IOS Access Points APs Software. This could allow a...

CVE-2019-1920: Improper Input Validation

A vulnerability in the 802.11r Fast Transition FT implementation for Cisco IOS Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected interface. The vulnerability is due to a lack of complete error handling condition...

CVE-2019-1909

A vulnerability in the implementation of Border Gateway Protocol BGP functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to incorrect processing of certain BGP update...

CVE-2019-1909: Improper Input Validation

A vulnerability in the implementation of Border Gateway Protocol BGP functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to incorrect processing of certain BGP update...

PT-2019-2654

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is due to incorrect processing of certain BGP update messages, which could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an...

Cisco IOS XE Arbitrary Action

The vulnerability of the Cisco IOS XE operating system’s web interface is related to the lack of authentication for the requests being executed. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on behalf of the current user, using a specially crafted link...

CVE-2019-1904

A vulnerability in the web-based UI web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected device. An attacke...

CVE-2019-1904

A vulnerability in the web-based UI web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected device. An attacke...

CVE-2019-1904: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based UI web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected device. An attacke...

Cisco IOS XE Privilege Escalation

The vulnerability of the Cisco IOS XE operating system’s Web UI is related to deficiencies in data validation during user input. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands in the Linux shell with root privileges...

Cisco IOS XR Authorization Issues Vulnerability

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. Cisco IOS XR is vulnerable to an authorization issue. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a network system or...

Cisco Releases Security Update for Cisco IOS XE

Cisco has released a security update to address a vulnerability in Cisco IOS XE. A remote attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the Cisco Security...

PT-2019-2466

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description The issue is related to a lack of authentication for executed requests in the web interface of Cisco IOS XE Software. This could allow a remote attacker to perform a cross-site...