PT-2017-2989

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.2 through 16.5 Description A logic error in the implementation of the Locator/ID Separation Protocol LISP could allow an unauthenticated, remote attacker to bypass authentication checks when registering an Endpoint...

PT-2017-12413

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 16.1 through 16.3.3 Description A vulnerability in the wireless controller manager could allow an unauthenticated, adjacent attacker to cause a restart of the switch and result in a denial of service DoS condition. The...

PT-2017-2995

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 3.7.0E through 3.7.5E Description The issue is related to insufficient validation of HTTP requests in the web-based GUI of Cisco IOS XE Software for Wireless LAN Controllers. This could allow a remote attacker,...

PT-2017-12418

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 through 15.6 Cisco IOS XE versions 3.3 through 16.4 Description A vulnerability in the Cisco Network Plug and Play application could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive dat...

PT-2017-2994

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 16.2 and later, if the HTTP Server feature is enabled for the device. Description A vulnerability in the web-based user interface of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate...

PT-2017-19461

Уязвимость операционной системы Cisco IOS связана с ошибками освобождения ресурсов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании, путем отправки широковещательных пакетов...

CVE-2011-4667

The encryption library in Cisco IOS Software 15.21T, 15.21T1, and 15.22T, Cisco NX-OS in Cisco MDS 9222i Multiservice Modular Switch, Cisco MDS 9000 18/4-Port Multiservice Module, and Cisco MDS 9000 Storage Services Node module before 5.26, and Cisco IOS in Cisco VPN Services Port Adaptor for...

Code injection

Cisco IOS before 12.233SXI allows remote authenticated users to cause a denial of service device reboot...

Design/Logic Flaw

Cisco IOS before 12.233SXI allows local users to cause a denial of service device reboot...

CVE-2010-3050

Cisco IOS before 12.233SXI allows remote authenticated users to cause a denial of service device reboot...

CVE-2010-3049: Improper Input Validation

Cisco IOS before 12.233SXI allows local users to cause a denial of service device reboot...

CVE-2011-4667: Undefined Security Weakness

The encryption library in Cisco IOS Software 15.21T, 15.21T1, and 15.22T, Cisco NX-OS in Cisco MDS 9222i Multiservice Modular Switch, Cisco MDS 9000 18/4-Port Multiservice Module, and Cisco MDS 9000 Storage Services Node module before 5.26, and Cisco IOS in Cisco VPN Services Port Adaptor for...

PT-2017-4823

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions prior to 12.233SXI Description: The issue allows local users to cause a denial of service, resulting in a device reboot. Recommendations: For versions prior to 12.233SXI, update to version 12.233SXI or later to resolve the...

CVE-2010-3050: Improper Input Validation

Cisco IOS before 12.233SXI allows remote authenticated users to cause a denial of service device reboot...

PT-2017-4824

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions prior to 12.233SXI Description: The issue allows remote authenticated users to cause a denial of service, resulting in a device reboot. Recommendations: For versions prior to 12.233SXI, update to version 12.233SXI or later ...

CVE-2017-6796

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to...

CVE-2017-6795

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper inpu...

Input validation

A vulnerability in the dynamic access control list ACL feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent attacker to cause dynamic ACL assignment to fail and the port to fail open. This could allow the attacker to pass traffic...

Input validation

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper inpu...

Race condition

A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and a denial of service DoS condition. The...