PT-2019-2126

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software versions prior to 6.2.3, 6.3.2, 6.4.0, and 6.5.1 Description A vulnerability in the Protocol Independent Multicast PIM feature could allow an unauthenticated, remote attacker to cause the PIM process to restart, resulting...

CVE-2019-1686: Improper Access Control

A vulnerability in the TCP flags inspection feature for access control lists ACLs on Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected device. The vulnerability is due to incorrect...

CVE-2019-1710: Improper Input Validation

A vulnerability in the sysadmin virtual machine VM on Cisco ASR 9000 Series Aggregation Services Routers running Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to access internal applications running on the sysadmin VM. The vulnerability is due to incorrect isolation...

CVE-2019-1712: Improper Input Validation

A vulnerability in the Protocol Independent Multicast PIM feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the PIM process to restart, resulting in a denial of service condition on an affected device. The vulnerability is due to the incorrect processing of...

Cisco IOS Router Version Detection

Binary data 700530.prm...

Cisco IOS DoS

The vulnerability of Cisco IOS and Cisco IOS XE operating systems is related to errors in processing IP Service Level Agreement SLA packets. Exploiting this vulnerability allows a malicious actor to trigger service interruptions using specially crafted packets...

Cisco IOS XE Privilege Escalation Command Execution

The vulnerability of the Cisco IOS XE operating system exists due to insufficient checks on commands provided by users. Exploiting this vulnerability allows a malicious actor, after verifying their identity, to execute arbitrary commands with elevated privileges by sending specially crafted...

Network-Based Application Recognition Cisco IOS DoS

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

Cisco IOS XE Command Injection

The vulnerability of the Cisco IOS XE operating system’s web interface is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Network-Based Application Recognition Cisco IOS DoS

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

Network-Based Application Recognition Cisco IOS DoS

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

Network-Based Application Recognition Cisco IOS DoS

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

Cisco IOS XE DoS

The vulnerability of the Performance Routing Protocol Version 3 PfRv3 implementation in the Cisco IOS XE operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets t...

Cisco IOS XE Hot Standby Router Protocol Data Compromise

The vulnerability of the Hot Standby Router Protocol HSRP component in Cisco IOS XE and Cisco IOS operating systems is related to incorrect initialization of resources. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...

Cisco IOS XR Router Version Detection

Binary data 700534.prm...

Cisco IOS DoS

The vulnerability of the SMS processing function in Cisco IOS and Cisco IOS XE operating systems exists due to errors in the processing of SMS Protocol Data Units PDUs, which are encoded using a specific set of symbols. Exploiting this vulnerability can allow an attacker to cause service failures...

Cisco IOS Device Detection

Binary data 700533.prm...

Cisco IOS XE Software Shell Access Authentication Bypass (cisco-sa-20180926-shell-access)

According to its self-reported version, Cisco IOS XE Software is affected by the following vulnerability: - An Authentication bypass in the shell access request mechanism. An authenticated attacker could exploit this in order to bypass authentication and gain root access to the system...

Cisco IOS XE Software Performance Routing Version 3 Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by following vulnerability - A vulnerability in Performance Routing Version 3 PfRv3 of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload.The vulnerability is due to...

Cisco IOS XE Software Network-Based Application Recognition Denial of Service Vulnerabilities

According to its self-reported version, Cisco IOS XE Software is affected by following multiple vulnerabilities - Multiple vulnerabilities in the Network-Based Application Recognition NBAR feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to...