PT-2019-1174

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software affected versions not specified Description The issue is related to errors in managing the state of TCP sockets in Cisco IOS and Cisco IOS XE Software. This could allow a remote attacker to cause the device ...

PT-2019-1282

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE Software affected versions not specified Description A vulnerability in the access control logic of the Secure Shell SSH server may allow connections sourced from a virtual routing and forwarding VRF instance despite the...

PT-2018-3000

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE affected versions not specified Description The issue is related to insufficient input validation in the implementation of the SXPv4 protocol in Cisco IOS and Cisco IOS XE. This can be exploited by a remote attacker...

Cisco IOS Access Points Software Denial of Service Vulnerability

Cisco IOS Access Points APs Software is a suite of software for management control of access point devices from Cisco USA. A security vulnerability exists in the 802.11r Fast Transition feature set in Cisco IOS APs Software. An attacker in close physical proximity could exploit this vulnerability...

CVE-2018-0441

A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a corruption of certain timer mechanisms triggered by...

CVE-2018-0441

A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a corruption of certain timer mechanisms triggered by...

CVE-2018-0441: Uncontrolled Resource Consumption

A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a corruption of certain timer mechanisms triggered by...

PT-2018-1744

Name of the Vulnerable Software and Affected Versions Cisco IOS Access Points APs Software affected versions not specified Description A vulnerability in the 802.11r Fast Transition feature set could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an...

Cisco IOS XE Image File Verification Digital Signature

The vulnerability of the Cisco IOS XE operating system’s image file verification function arises due to errors in verifying the digital signatures of the files uploaded to the device. Exploiting this vulnerability allows a malicious actor to install malware on vulnerable devices...

Cisco IOS XE MACsec Key Agreement Access Control Error

The vulnerability of the MACsec Key Agreement MKA protocol implementation in the Cisco IOS XE operating system is caused by access control errors. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and gain access to the network...

Cisco IOS XR Software BGP Implementation Denial of Service Vulnerability

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. An input validation vulnerability exists in the Border Gateway Protocol BGP feature implementation in Cisco IOS XR...

CVE-2018-15373

A vulnerability in the implementation of Cisco Discovery Protocol functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust memory on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to...

CVE-2018-15371

A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient...

CVE-2018-15373

A vulnerability in the implementation of Cisco Discovery Protocol functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust memory on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to...

CVE-2018-15372

A vulnerability in the MACsec Key Agreement MKA using Extensible Authentication Protocol-Transport Layer Security EAP-TLS functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to bypass authentication and pass traffic through a Layer 3 interface of an affected...

CVE-2018-15371

A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient...

CVE-2018-0476

A vulnerability in the Network Address Translation NAT Session Initiation Protocol SIP Application Layer Gateway ALG of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of SIP packets in...

CVE-2018-0476

A vulnerability in the Network Address Translation NAT Session Initiation Protocol SIP Application Layer Gateway ALG of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of SIP packets in...

CVE-2018-0481

A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes command arguments, faili...

CVE-2018-0473

A vulnerability in the Precision Time Protocol PTP subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of the Precision Time Protocol. The vulnerability is due to insufficient processing of PTP packets. An attacker could explo...