Authentication flaw

The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote...

CVE-2015-6279

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3...

CVE-2015-6280

Cisco IOS/IOS XE SSHv2 RSA-based user authentication bypass (CVE-2015-6280) allows an unauthenticated, remote attacker who knows a valid RSA username and public key to bypass authentication and log in with the user’s privileges, potentially gaining admin access depending on VTY/user configuration...

CVE-2015-6280

The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote...

Design/Logic Flaw

Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service device reload via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933...

CVE-2015-6282

Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service device reload via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933...

Cisco IOS SYNful Knock Implant

Binary data ciscosynfulknock.nbin...

Cisco Catalyst 4500 SNMP Polling Denial of Service Vulnerability (Cisco-SA-20150402-CVE-2015-0687)

A vulnerability in the Simple Network Management Protocol SNMP code of Cisco Catalyst 4500 devices running Cisco IOS Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpt...

CVE-2015-6294

Cisco IOS 15.23E and earlier and IOS XE 3.62E and earlier allow remote attackers to cause a denial of service functionality loss via crafted Cisco Discovery Protocol CDP packets, aka Bug ID CSCuu25770...

Design/Logic Flaw

The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial of service process reset via crafted packets, aka Bug ID CSCun36525...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially crafted IPv6 packet...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures using specially crafted IPv4 or IPv6 packets...

CVE-2015-6271

Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008...

Design/Logic Flaw

Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008...

Code injection

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted 1 IPv4 or 2 IPv6 packet, aka Bug ID CSCsw69990...

CVE-2015-6273

Cisco IOS XE on ASR 1000 devices (pre-3.1.2S) is affected by a vulnerability in the automatic setup of Virtual Fragment Reassembly (VFR) handled by certain firewall and NAT components. The root cause is mishandling of VFR setup, which can be triggered by crafted IP packets, allowing a remote atta...

Evolution in Attacks Against Cisco IOS Software Platforms

Cisco has observed increasingly complex attacks that could allow an attacker to gain administrative access to a Cisco IOS device by installing a malicious ROMMON image. Successful exploitation using this image could allow an attacker to manipulate device behavior after the device is rebooted...

Cisco IOS XE Software for 1000 Series Aggregation Services Routers Fragmented Packet DoS

The version of Cisco IOS XE software running on the remote Cisco 1000 Series Aggregation Services Router ASR is affected by a denial of service vulnerability in the Embedded Services Processor ESP due to a flaw in handling the reassembly of fragmented IPv4 or IPv6 packets. A remote, unauthenticat...

Cisco IOS XE Denial of Service Vulnerability

Cisco IOS XE is an operating system developed by the American company Cisco Cisco for its network equipment. A security vulnerability exists in the packet reassembly subsystem of Cisco IOS XE 3.13S and earlier versions, which originates from a program that sends an ATTN-3-SYNCTIMEOUT error messag...

Code injection

Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted series of fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCtd72617...