Cisco IOS XE Software TFTP DoS

A vulnerability in the flow manager code in Cisco IOS XE could allow a remote, unauthenticated attacker to trigger a denial of service condition resulting in a crash of the device by sending specially generated TFTP UDP traffic. It should be noted that this plugin merely checks for an affected IO...

Cisco IOS XE Software IP Device Tracking DoS

A vulnerability in the IP Device Tracking function in Cisco IOS XE could allow a remote, unauthenticated attacker to trigger a denial of service condition resulting in a reload of the device. It should be noted that while the vendor describes a possible workaround, this plugin does not test for t...

CVE-2013-6979

The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP address, aka Bug ID CSCuj90227...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability (cisco-sa-20120530-iosxr)

Cisco IOS XR Software contains a vulnerability when handling crafted packets that may result in a denial of service condition. The vulnerability only exists on Cisco 9000 Series Aggregation Services Routers ASR Route Switch Processor RSP-4G and RSP-8G, Route Switch Processor 440 RSP440, and Cisco...

Cisco IOS XR Software Malformed Border Gateway Protocol Attribute Vulnerability (cisco-sa-20120926-bgp)

Cisco IOS XR Software contains a vulnerability in the Border Gateway Protocol BGP routing protocol feature. The vulnerability can be triggered when the router receives a malformed attribute from a peer on an existing BGP session. Successful exploitation of this vulnerability can cause all BGP...

Information Leakage Using IPv6 Routing Header in Cisco IOS XR (cisco-sa-20070808-IOS-IPv6-leak)

Cisco IOS XR contains a vulnerability when processing specially crafted IPv6 packets with a Type 0 Routing Header present. Exploitation of this vulnerability leads to information leakage on affected IOS and IOS XR devices, and can also result in a crash of the affected IOS device. Successful...

Code injection

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service memory consumption via TFTP 1 client or 2 server traffic, aka Bug IDs CSCuh09324 and CSCty42686...

Memory corruption

The IP Device Tracking IPDT feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service IPDT AVL corruption and device reload via a crafted sequence of ARP packets, aka Bug ID CSCuh38133...

Cross site request forgery (csrf)

The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service process reload via a request for an unspecified MIB, aka Bug ID CSCuh43144...

Information disclosure

The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service MTU change and tunnel-session drop via crafted ICMP packets, aka Bug ID CSCul29918...

CVE-2013-6694

The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service MTU change and tunnel-session drop via crafted ICMP packets, aka Bug ID CSCul29918...

CVE-2013-6693

The MLDP implementation in Cisco IOS 15.33S and earlier on 7600 routers, when many VRFs are configured, allows remote attackers to cause a denial of service chunk corruption and device reload by establishing many multicast flows, aka Bug ID CSCue22345...

Memory corruption

The MLDP implementation in Cisco IOS 15.33S and earlier on 7600 routers, when many VRFs are configured, allows remote attackers to cause a denial of service chunk corruption and device reload by establishing many multicast flows, aka Bug ID CSCue22345...

Design/Logic Flaw

The SSL VPN implementation in Cisco IOS 15.31T2 and earlier allows remote authenticated users to cause a denial of service interface queue wedge via crafted DTLS packets in an SSL session, aka Bug IDs CSCuh97409 and CSCud90568...

CVE-2013-6686

The SSL VPN implementation in Cisco IOS 15.31T2 and earlier allows remote authenticated users to cause a denial of service interface queue wedge via crafted DTLS packets in an SSL session, aka Bug IDs CSCuh97409 and CSCud90568...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability (cisco-sa-20131106-sip)

A vulnerability exists in the Session Initiation Protocol SIP implementation in Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device or cause memory leaks that may result in system instabilities. To exploit this vulnerability, affected...

Design/Logic Flaw

Multiple memory leaks in Cisco IOS 15.1 before 15.14M7 allow remote attackers to cause a denial of service memory consumption or device reload by sending a crafted SIP message over 1 IPv4 or 2 IPv6, aka Bug IDs CSCuc42558 and CSCug25383...

Design/Logic Flaw

The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service process crash via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176...

CVE-2013-5553

Multiple memory leaks in Cisco IOS 15.1 before 15.14M7 allow remote attackers to cause a denial of service memory consumption or device reload by sending a crafted SIP message over 1 IPv4 or 2 IPv6, aka Bug IDs CSCuc42558 and CSCug25383...

Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers (cisco-sa-20131030-asr1000)

Cisco IOS XE Software for 1000 Series Aggregation Services Routers ASR contains the following denial of service DoS vulnerabilities : - Cisco IOS XE Software TCP Segment Reassembly Denial of Service Vulnerability CVE-2013-5543 - Cisco IOS XE Software Malformed EoGRE Packet Denial of Service...