Cisco IOS Software Cluster Management Protocol DoS Vulnerability (cisco-sa-20180926-cmp)

According to its self-reported version, the IOS is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco IOS Software PTP DoS Vulnerability (cisco-sa-20180926-ptp)

According to its self-reported version, the IOS is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

PT-2018-13028

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A vulnerability in the implementation of Border Gateway Protocol BGP functionality could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. Th...

PT-2018-10805

Name of the Vulnerable Software and Affected Versions Puppet cisco ios module versions prior to 0.4.0 Description The issue concerns the lack of host identity validation before establishing a SSH connection. This has been addressed in the 0.4.0 release of the cisco ios module, where host key...

PT-2018-10806

Name of the Vulnerable Software and Affected Versions Puppet cisco ios module versions prior to 0.4.0 Description The issue concerns the Puppet cisco ios module, which previously output SSH session debug information, including login credentials, to a world-readable file on every run...

Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability

A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install a malicious software image or file on an affected device. The vulnerability is due to the affected software improperly verifying digital signatures for software image...

Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability

A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected software improperl...

PT-2018-8847

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE Software affected versions not specified Description A vulnerability in the IPv6 processing code could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling...

PT-2018-13004

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers affected versions not specified Description A vulnerability in the embedded test subsystem could allow an authenticated, local attacker to write arbitrary values to...

PT-2018-2015

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE Software affected versions not specified Description A vulnerability in the Open Shortest Path First version 3 OSPFv3 implementation could allow an unauthenticated, adjacent attacker to cause an affected device to reload...

PT-2018-13003

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the shell access request mechanism could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of an...

PT-2018-13002

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the CLI parser could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands...

PT-2018-2100

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A vulnerability in the VLAN Trunking Protocol VTP subsystem could allow an unauthenticated, adjacent attacker to corrupt the internal VTP database on an...

PT-2018-2101

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is du...

PT-2018-2010

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulti...

PT-2018-2011

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A vulnerability in the implementation of Cisco Discovery Protocol functionality could allow an unauthenticated, adjacent attacker to exhaust memory on an...

PT-2018-2104

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the errdisable per VLAN feature could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service DoS condition...

PT-2018-13005

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers affected versions not specified Description A vulnerability in the embedded test subsystem could allow an authenticated, local attacker to write arbitrary values to...

PT-2018-2099

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A vulnerability in the TACACS+ client subsystem could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a deni...

PT-2018-2102

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the Network Address Translation NAT Session Initiation Protocol SIP Application Layer Gateway ALG could allow an unauthenticated, remote attacker to cause an...