Race condition

A vulnerability in the Local Packet Transport Services LPTS ingress frame-processing functionality of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause one of the LPTS processes on an affected system to restart unexpectedly, resulting in a brief denial of service DoS...

CVE-2017-12355: Improper Input Validation

A vulnerability in the Local Packet Transport Services LPTS ingress frame-processing functionality of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause one of the LPTS processes on an affected system to restart unexpectedly, resulting in a brief denial of service DoS...

PT-2017-12520

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A vulnerability in the Local Packet Transport Services LPTS ingress frame-processing functionality could allow an unauthenticated, remote attacker to cause one of the LPTS...

Cisco IOS and IOS XE Software IOS daemon cross-site scripting vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices.IOS daemon IOSd is one of the IOS daemons. A cross-site scripting vulnerability exists in the web-based management interface of IOSd in Cisco IOS and IOS XE Software, which stems from the program...

CVE-2017-12304

A vulnerability in the IOS daemon IOSd web-based management interface of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface on an affected device. The vulnerability is due ...

PT-2017-12479

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE Software affected versions not specified Description A cross-site scripting XSS issue exists due to insufficient validation of user-supplied input by the web-based management interface. This could allow an unauthenticated,...

CVE-2017-12304: Improper Neutralization of Input During Web Page Generation

A vulnerability in the IOS daemon IOSd web-based management interface of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface on an affected device. The vulnerability is due ...

PT-2017-4193

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions prior to 16.3 Description A vulnerability in the Border Gateway Protocol BGP over an Ethernet Virtual Private Network EVPN for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the...

PT-2017-12453

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco Aironet Access Points affected versions not specified Description A vulnerability in the packet processing code could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected devic...

CVE-2017-12279: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to...

Cisco IOS XE REST API Authentication Bypass

The vulnerability of the REST API interface of the Cisco IOS XE operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and gain access to the web interface by sending a specially crafted API...

Cisco IOS CIP DoS

The vulnerabilities of the Cisco IOS operating system’s implementation of the Common Industrial Protocol CIP exist due to insufficient validation of input data during the processing of CIP packets. Exploiting these vulnerabilities can allow a malicious actor to trigger a device restart and a...

Cisco IOS XE Software Information Disclosure Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A local information disclosure vulnerability exists in the IPsec feature of Cisco IOS XE Software. An attacker could exploit the vulnerability to obtain sensitive information...

CVE-2017-12272

A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameter...

Cross site scripting

A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameter...

CVE-2017-12289

A vulnerability in conditional, verbose debug logging for the IPsec feature of Cisco IOS XE Software could allow an authenticated, local attacker to display sensitive IPsec information in the system log file. The vulnerability is due to incorrect implementation of IPsec conditional, verbose debug...

CVE-2017-12289: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in conditional, verbose debug logging for the IPsec feature of Cisco IOS XE Software could allow an authenticated, local attacker to display sensitive IPsec information in the system log file. The vulnerability is due to incorrect implementation of IPsec conditional, verbose debug...

CVE-2017-12272: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameter...

PT-2017-12463

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the IPsec feature could allow an authenticated, local attacker to display sensitive IPsec information in the system log file. The issue is due to incorrect...

PT-2017-12447

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the web framework code could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. The...