Cisco IOS XE Software IPv6 Neighbor Discovery DoS (CSCup28217)

The remote Cisco IOS XE device is missing a vendor-supplied security patch, and is not configured to limit the IPv6 neighbor discovery ND cache. It is, therefore, affected by a denial of service vulnerability due to insufficient bounds on internal tables. An unauthenticated, adjacent attacker can...

Code injection

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS 15.33S0.1 on ASR devices mishandles internal tables, which allows remote attackers to cause a denial of service memory consumption or device crash via a flood of crafted ND messages, aka Bug ID CSCup28217...

Operating System (OS) Detection (Telnet)

Telnet banner based Operating System OS detection. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH SPDX-FileCopyrightText: Reworked, improved and extended detection code and pattern since 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Design/Logic Flaw

The publish-event event-manager feature in Cisco IOS 15.52S and 15.53S on Cloud Services Router 1000V devices allows local users to execute arbitrary commands with root privileges by leveraging administrative access to enter crafted environment variables, aka Bug ID CSCux14943...

Cisco Cloud Services Router 1000V Command Injection Vulnerability (cisco-sa-20151130-csr)

A vulnerability in the event manager environment and publish-event function of the Cisco Cloud Services Router 1000V Series could allow an authenticated, local attacker to perform a command injection attack with root-level privileges. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptio...

Cisco IOS XE 3S Platforms Series root Shell License Bypass Vulnerability

A vulnerability in one of the diagnostic commands in the Cisco IOS XE operating system for Cisco IOS XE 3S platforms could allow an authenticated, privileged, local attacker to gain restricted root shell access. The root shell is provided for advanced troubleshooting with Cisco Technical Assistan...

Cisco IOS Virtual PPP Interfaces Security Bypass

The remote Cisco device is affected by a security bypass vulnerability due to physical-interface ACLs superseding virtual PPP interface ACLs. An authenticated, remote attacker connected to an authenticated PPP session can exploit this to bypass intended network-traffic restrictions. C Tenable...

Cisco IOS ACL控制绕过漏洞

No description provided by source...

Cisco IOS Virtual PPP ACL控制绕过漏洞

No description provided by source...

Design/Logic Flaw

Cisco IOS 15.204M and 15.403M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303...

CVE-2015-6365

Cisco IOS Software CVE-2015-6365 affects IOS releases 15.2(04)M and 15.4(03)M, where physical-interface ACLs can supersede virtual PPP interface ACLs. This allows an authenticated remote user connected to a PPP session to bypass ACLs on virtual PPP interfaces and potentially pass traffic that sho...

Design/Logic Flaw

The RADIUS client implementation in Cisco IOS 15.43M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause a denial of service device reload via malformed answers, aka Bug ID CSCuu59324...

Cisco IOS / Cisco IOS XE multiple security vulnerabilities

Authentication bypass, DoS...

Cisco IOS Software RADIUS Client Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in the RADIUS client feature of Cisco IOS Software can be exploited by a remote attacker to cause a reload on an affected device...

Cisco IOS XE SSHv2 RSA-Based User Authentication Bypass (CSCus73013)

The remote Cisco IOS XE device is missing a vendor-supplied security patch, and is configured for SSHv2 RSA-based user authentication. It is, therefore, affected by a flaw in the SSHv2 protocol implementation of the public key authentication method. An unauthenticated, remote attacker can exploit...

Cisco IOS XE IPv6 Snooping DoS (cisco-sa-20150923-fhs)

The remote Cisco IOS XE device is missing vendor-supplied security patches, and is configured for IPv6 snooping. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the IPv6 Snooping feature due to missing Control Plane Protection CPPr protection mechanisms. An...

CVE-2015-6280

The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote...

CVE-2015-6278

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3...

Design/Logic Flaw

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3...

Design/Logic Flaw

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3...