PT-2018-2102

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the Network Address Translation NAT Session Initiation Protocol SIP Application Layer Gateway ALG could allow an unauthenticated, remote attacker to cause an...

PT-2018-8849

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device...

PT-2018-8848

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 16.6.1 through 16.6.2 Description A vulnerability in the Cisco Discovery Protocol CDP module could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of service DoS...

PT-2018-2012

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software affected versions not specified Description The issue is due to improper input validation when handling Cluster Management Protocol CMP messages, which could allow an unauthenticated, adjacent attacker to...

PT-2018-13006

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A vulnerability in the Cisco Network Plug and Play agent could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The...

PT-2018-1612

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the Image Verification feature could allow an authenticated, local attacker to install a malicious software image or file on an affected device. The issue is...

PT-2018-2952

Name of the Vulnerable Software and Affected Versions Cisco IOS affected versions not specified Description The issue is related to errors in processing Precision Time Protocol PTP packets in the Cisco IOS operating system. An unauthenticated, remote attacker could exploit this by sending custom...

PT-2018-2103

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Cisco ASA 5500-X Series Adaptive Security Appliance ASA affected versions not specified Description A vulnerability in the IPsec driver code could allow an unauthenticated, remote attacker ...

PT-2018-8850

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device...

PT-2018-1611

Name of the Vulnerable Software and Affected Versions Cisco IOS XE affected versions not specified Description The issue is related to a logic error in the MACsec Key Agreement MKA functionality of Cisco IOS XE Software, specifically when using Extensible Authentication Protocol-Transport Layer...

CVE-2018-0131

A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the encrypted nonces of an Internet Key Exchange Version 1 IKEv1 session. The vulnerability exists because the affected software...

CVE-2018-0131: Inadequate Encryption Strength

A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the encrypted nonces of an Internet Key Exchange Version 1 IKEv1 session. The vulnerability exists because the affected software...

PT-2018-1452

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE affected versions not specified Description The issue is related to errors in decrypting traffic in the implementation of the Internet Key Exchange IKE protocol in Cisco IOS and Cisco IOS XE. This could allow a remot...

Race condition

A vulnerability in the authentication, authorization, and accounting AAA security services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause an affected device to reload, resulting in a denial of service DoS condition...

CVE-2018-0315: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the authentication, authorization, and accounting AAA security services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause an affected device to reload, resulting in a denial of service DoS condition...

Cisco IOS XE DoS

The vulnerability of the routing mechanism that implements the Forwarding Information Base FIB in the Cisco IOS XE operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco IOS XE Arbitrary Command Execution

The multiple vulnerabilities of the Cisco IOS XE operating system’s CLI analyzer are related to the failure to take measures to neutralize special elements used in the operating system’s commands. Exploiting these vulnerabilities can allow attackers to gain access to the device’s Linux shell and...

Cisco IOS XE Arbitrary Command Execution

The multiple vulnerabilities of the Cisco IOS XE operating system’s CLI analyzer are related to the failure to take measures to neutralize special elements used in the operating system’s commands. Exploiting these vulnerabilities can allow attackers to gain access to the device’s Linux shell and...

Cisco IOS XE Command Execution

The vulnerability of the Cisco IOS XE operating system’s CLI analyzer is related to deficiencies in access control. Exploiting this vulnerability allows a person with privileges at the EXEC mode level to gain access to the device’s Linux shell and execute arbitrary commands with root privileges...

Cisco IOS XE Command Execution

The vulnerability of the Cisco IOS XE operating system’s CLI analyzer is related to deficiencies in access control. Exploiting this vulnerability allows a person with privileges at the EXEC mode level to gain access to the device’s Linux shell and execute arbitrary commands with root privileges...