CVE-2017-3861

Cisco IOS and IOS XE EnergyWise DoS vulnerabilities (CVE-2017-3861, among others) stem from improper parsing of crafted EnergyWise IPv4 packets. An unauthenticated remote attacker can trigger a buffer overflow or device reload, causing denial of service. IPv6 is not exploitable; only devices conf...

CVE-2017-3862

Cisco IOS and IOS XE EnergyWise DoS vulnerabilities (CVE-2017-3862) arise from improper parsing of IPv4 EnergyWise packets, enabling unauthenticated remote exploitation that can cause a buffer overflow or device reload. Affected: IOS 12.2 and 15.0–15.6; IOS XE 3.2–3.18. IPv4 packets to EnergyWise...

CVE-2017-3863

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2017-6615

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

Exploit for Improper Input Validation in Cisco Ios

A vulnerability in the Cisco Cluster Management Protocol CMP...

CVE-2017-6615: Out-of-bounds Read

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

CVE-2017-3863: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2017-3860: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2017-3862: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2017-3861: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

Cisco IOS XE Software Simple Network Management Protocol Subsystem Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources...

Cisco IOS Software EnergyWise Denial of Service Vulnerabilities (cisco-sa-20170419-energywise)

Multiple vulnerabilities in the EnergyWise module of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text...

PT-2017-2001

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.6 Cisco IOS XE versions 3.2 through 3.18 Description Multiple vulnerabilities in the EnergyWise module could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload...

PT-2017-2002

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.6 Cisco IOS XE versions 3.2 through 3.18 Description Multiple vulnerabilities in the EnergyWise module could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload...

PT-2017-2003

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.6 Cisco IOS XE versions 3.2 through 3.18 Description The issue is caused by improper parsing of crafted EnergyWise packets destined to an affected device, which could allow an unauthenticated, remote...

PT-2017-2000

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.6 Cisco IOS XE versions 3.2 through 3.18 Description Multiple vulnerabilities in the EnergyWise module could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload...

PT-2017-17186

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.16 Description A vulnerability in the Simple Network Management Protocol SNMP subsystem could allow an authenticated, remote attacker to cause a denial of service DoS condition. The issue is due to a race condition that...

Memory corruption

A vulnerability in Google-defined remote procedure call gRPC handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash due to a system memory leak, resulting in a denial of service DoS condition. This vulnerability...

Design/Logic Flaw

A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on the underlying operating system with the privileges of the root user. More Information: CSCuz06639 CSCuz42122. Known...

CVE-2017-6599

A vulnerability in Google-defined remote procedure call gRPC handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash due to a system memory leak, resulting in a denial of service DoS condition. This vulnerability...