PT-2017-17228

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series Routers version 6.2.11.BASE Description A vulnerability in the forwarding component could allow an authenticated, local attacker to cause the router to stop forwarding...

Cisco IOS Web Interface Command Execution

The vulnerability in the Cisco IOS operating system’s web interface exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with superuser privileges remotely...

CVE-2017-3876

A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...

CVE-2017-3876: Undefined Security Weakness

A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...

Cisco IOS Software Unauthorized Access Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in Cisco IOS 15.53M Software in Cisco CallManager Express CME devices that stems from a configuration restriction in the toll-fraud protections...

CVE-2017-6624

CVE-2017-6624 affects Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME). The issue stems from a configuration restriction in the toll-fraud protections component, allowing an unauthenticated, remote attacker to place unauthorized long-distance calls via an affected system. Connected...

PT-2017-17194

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.53M Description A configuration restriction in the toll-fraud protections component of the affected software could allow an unauthenticated, remote attacker to make unauthorized phone calls. An attacker could exploit this...

PT-2017-2361

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 6.1.1 Description The issue is related to errors in resource management in the Event Management Service of Cisco IOS XR routers. It can be exploited by a remote, unauthenticated attacker to cause a denial of service...

CVE-2017-6624: Improper Authentication

A vulnerability in Cisco IOS 15.53M Software for Cisco CallManager Express CME could allow an unauthenticated, remote attacker to make unauthorized phone calls. The vulnerability is due to a configuration restriction in the toll-fraud protections component of the affected software. An attacker...

Cisco IOS XE EnergyWise DoS (cisco-sa-20170419-energywise)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by multiple buffer overflow conditions due to improper parsing of EnergyWise packets. An unauthenticated, remote attacker can exploit these, by sending specially crafted IPv4 EnergyWise...

Cisco IOS EnergyWise DoS (cisco-sa-20170419-energywise)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by multiple buffer overflow conditions due to improper parsing of EnergyWise packets. An unauthenticated, remote attacker can exploit these, by sending specially crafted IPv4 EnergyWise packets...

Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2017-06700)

Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in the Simple Network Management Protocol SNMP subsystem in Cisco IOS XE Software. A remote attacker could exploit this vulnerability to cause a denial of service devi...

CVE-2017-6615

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

CVE-2017-3862

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

Race condition

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

CVE-2017-6615

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

CVE-2017-3860

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

Buffer overflow

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

Buffer overflow

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2017-3861

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...