4862 matches found
Cisco IOS XE Crafted MPLS IP Fragmentation DoS (CSCul00709)
According to its self-reported version, the remote IOS XE device is affected by a denial of service vulnerability. A denial of service flaw exists the Multiprotocol Label Switching MPLS IP fragmentation function of Cisco XE. An unauthenticated, remote attacker with a specially crafted MPLS IP...
Command injection
Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, which allows local users to obtain Linux root access by leveraging administrative privilege, aka Bug ID CSCur09815...
Code injection
Cisco IOS 15.43S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet processing, which allows remote attackers to cause a denial of service BGP neighbor flapping by sending many crafted IPv4 packets, aka Bug ID CSCuo29736...
Command injection
The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...
Cisco IOS XE Software Autonomic Networking Infrastructure Certificate Validation Vulnerability
A vulnerability in certificate validation for Autonomic Networking Infrastructure ANI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to masquerade as another device. The vulnerability is due to incomplete certificate validation. An attacker could exploit this vulnerabili...
Design/Logic Flaw
The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647...
Design/Logic Flaw
Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks aka RPL on both the Autonomic Control Plane ACP and external Autonomic Networking Infrastructure ANI interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an AN...
Design/Logic Flaw
The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid message via crafted messages, aka Bug ID CSCuq22677...
CVE-2014-3405
Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks aka RPL on both the Autonomic Control Plane ACP and external Autonomic Networking Infrastructure ANI interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an AN...
CVE-2014-3404
Cisco IOS XE's Autonomic Networking Infrastructure (ANI) has a certificate validation vulnerability (CVE-2014-3404) due to incomplete certificate validation in the ANI component. A remote attacker could send crafted messages to the ANI device and cause acceptance of an invalid message. The Cisco ...
Cisco IOS DHCP Remember Functionality DoS (CSCuh46822)
According to its self-reported version, the remote IOS device is affected by a denial of service vulnerability when the remember functionality of DHCP is enabled. A flaw exists where the remember functionality does not correctly handle the releasing of leases. An attacker can exploit this issue b...
Cisco IOS Software RSVP DoS (cisco-sa-20140924-rsvp)
According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the Resource Reservation Protocol RSVP implementation due to improper handling of RSVP packets. A remote attacker can exploit this issue by sending...
Cisco IOS XE Software RSVP DoS (cisco-sa-20140924-rsvp)
According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the Resource Reservation Protocol RSVP implementation due to improper handling of RSVP packets. A remote attacker can exploit this issue by sending...
Cisco IOS XE Software Multiple mDNS Gateway DoS Vulnerabilities (cisco-sa-20140924-mdns)
According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by two unspecified denial of service vulnerabilities in the multicast DNS mDNS implementation. A remote attacker can exploit this issue by sending a specially crafted mDNS packet to cause th...
Cisco IOS XE Software DHCPv6 DoS (cisco-sa-20140924-dhcpv6)
According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the DHCP version 6 DHCPv6 implementation due to improper handling of DHCPv6 packets. A remote attacker can exploit this issue by sending specially...
Cisco IOS Software Multiple mDNS Gateway DoS Vulnerabilities (cisco-sa-20140924-mdns)
According to its self-reported version, the version of Cisco IOS running on the remote host is affected by two unspecified denial of service vulnerabilities in the multicast DNS mDNS implementation. A remote attacker can exploit this issue by sending a specially crafted mDNS packet to cause the...
Cisco IOS XE Software SIP DoS (cisco-sa-20140924-sip)
According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a vulnerability in the Session Initiation Protocol SIP implementation due to improper handling of SIP messages. A remote attacker can exploit this issue by sending specially crafted SIP...
Cisco IOS Software SIP DoS (cisco-sa-20140924-sip)
According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a vulnerability in the Session Initiation Protocol SIP implementation due to improper handling of SIP messages. A remote attacker can exploit this issue by sending specially crafted SIP...
Cisco IOS Software Network Address Translation (NAT) ALG Module DoS (cisco-sa-20140924-nat)
According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the Network Address Translation NAT application-layer gateway ALG module. This issue exists due to improper handling of multipart Session Description...
