PT-2018-8628

Name of the Vulnerable Software and Affected Versions: Cisco IOS and IOS XE Software affected versions not specified Description: A Path Traversal issue in the diagnostic shell could allow an authenticated, local attacker to overwrite system files by using certain diagnostic shell commands with...

CVE-2018-0136

A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router ASR 9000 Series could allow an unauthenticated, remote attacker to trigger a reload of one or more Trident-based line cards, resulting in a denial of service DoS condition. The...

CVE-2018-0136

A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router ASR 9000 Series could allow an unauthenticated, remote attacker to trigger a reload of one or more Trident-based line cards, resulting in a denial of service DoS condition. The...

PT-2018-8636

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router ASR 9000 Series Description: A vulnerability in the IPv6 subsystem could allow an unauthenticated, remote attacker to trigger a reload of one or more Trident-based...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Ios

CiscoIOSSNMPToolkit !forthebadgehttp://forthebadge.com/im...

CVE-2018-0088

A vulnerability in one of the diagnostic test CLI commands on Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software could allow an authenticated, local attacker to impact the stability of the device. This could result in arbitrary code execution or a denial of service DoS...

CVE-2018-0088

The CVE-2018-0088 issue affects Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software. It stems from a diagnostic test CLI command that allows writing to device memory, enabling an authenticated local attacker (privilege level 15) to cause arbitrary code execution or a denial ...

CVE-2018-0088

A vulnerability in one of the diagnostic test CLI commands on Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software could allow an authenticated, local attacker to impact the stability of the device. This could result in arbitrary code execution or a denial of service DoS...

PT-2018-8598

Name of the Vulnerable Software and Affected Versions: Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software affected versions not specified Description: A vulnerability in the diagnostic test CLI commands could allow an authenticated, local attacker to impact the stability of...

CVE-2018-0088: Incorrect Permission Assignment for Critical Resource

A vulnerability in one of the diagnostic test CLI commands on Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software could allow an authenticated, local attacker to impact the stability of the device. This could result in arbitrary code execution or a denial of service DoS...

Cisco IOS - Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/env python if False: ''' CVE-2017-6736 / cisco-sa-20170629-snmp Cisco IOS remote code execution =================== This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability in SNMP service...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Ios

CVE-2017-6736 / cisco-sa-20170629-snmp Cisco IOS remote code exe...

Cisco IOS - Remote Code Execution

Cisco IOS - Remote Code Execution !/usr/bin/env python if False: ''' CVE-2017-6736 / cisco-sa-20170629-snmp Cisco IOS remote code execution =================== This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability in SNMP service disclosed by Cisco...

Cisco IOS 12.2 < 12.4 / 15.0 < 15.6 - Security Association Negotiation Request Device Memory E

Exploit for hardware platform in category remote exploits !/usr/bin/python -- coding: utf8 -- import socket from scapy.all import --------------------------- Requirements: $ sudo pip install scapy --------------------------- conf.verb = 0 RCVSIZE = 2548 TIMEOUT = 6 payload =...

Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2017-36400)

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A denial of service vulnerability exists in the Local Packet Transport Services LPTS ingress frame handling feature in...

CVE-2017-12355

A vulnerability in the Local Packet Transport Services LPTS ingress frame-processing functionality of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause one of the LPTS processes on an affected system to restart unexpectedly, resulting in a brief denial of service DoS...

Race condition

A vulnerability in the Local Packet Transport Services LPTS ingress frame-processing functionality of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause one of the LPTS processes on an affected system to restart unexpectedly, resulting in a brief denial of service DoS...

CVE-2017-12355: Improper Input Validation

A vulnerability in the Local Packet Transport Services LPTS ingress frame-processing functionality of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause one of the LPTS processes on an affected system to restart unexpectedly, resulting in a brief denial of service DoS...

PT-2017-12520

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A vulnerability in the Local Packet Transport Services LPTS ingress frame-processing functionality could allow an unauthenticated, remote attacker to cause one of the LPTS...

Cisco IOS and IOS XE Software IOS daemon cross-site scripting vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices.IOS daemon IOSd is one of the IOS daemons. A cross-site scripting vulnerability exists in the web-based management interface of IOSd in Cisco IOS and IOS XE Software, which stems from the program...