CVE-2017-3824

Cisco CVE-2017-3824 affects Cisco cBR Series Converged Broadband Routers (notably cBR-8) running Cisco IOS XE. The vulnerability is caused by memory corruption in the handling of list headers, allowing an unauthenticated, remote attacker to cause the device to reload and crash (DoS) by sending cr...

CVE-2017-3820: Improper Initialization

A vulnerability in Simple Network Management Protocol SNMP functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a...

CVE-2017-3824: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service DoS condition. Cisco cBR-8 Converged Broadband Routers running vulnerable versions of Cis...

Cisco ASR 1000 Series Aggregation Services Routers SNMP High CPU Denial of Service Vulnerability

A vulnerability in Simple Network Management Protocol SNMP functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a...

CVE-2017-3803

A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthenticated, adjacent attacker to cause a memory leak in the software forwarding queue that would eventually lead to a partial denial of service DoS condition. More Information:...

Code injection

A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. Affected Products: This vulnerability affects Cisco IOS Software and...

CVE-2017-3805

A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. Affected Products: This vulnerability affects Cisco IOS Software and...

CVE-2017-3805

The CVE-2017-3805 issue is a Cisco IOS/IOx Information Disclosure vulnerability where the web-based management interface fails to validate HTTP URLs, allowing an unauthenticated, remote attacker to view confidential data without signing in. Affected platforms include Cisco IOS and IOx Software on...

CVE-2017-3803

A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthenticated, adjacent attacker to cause a memory leak in the software forwarding queue that would eventually lead to a partial denial of service DoS condition. More Information:...

CVE-2017-3803: Missing Release of Resource after Effective Lifetime

A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthenticated, adjacent attacker to cause a memory leak in the software forwarding queue that would eventually lead to a partial denial of service DoS condition. More Information:...

CVE-2017-3805: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. Affected Products: This vulnerability affects Cisco IOS Software and...

Cisco IOS IKEv1 Packet Handling Remote Information Disclosure (cisco-sa-20160916-ikev1) (BENIGNCERTAIN) (uncredentialed check)

The IKE service running on the remote Cisco IOS device is affected by an information disclosure vulnerability, known as BENIGNCERTAIN, in the Internet Key Exchange version 1 IKEv1 subsystem due to improper handling of IKEv1 security negotiation requests. An unauthenticated, remote attacker can...

PT-2017-16110

Name of the Vulnerable Software and Affected Versions Cisco IOS Software version 1.00 Cisco IOx Software version 1.00 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to view confidential information without authenticating to the...

Cisco IOS Software and IOx Software Information Disclosure Vulnerability

Cisco IOS is an operating system developed by Cisco for its network devices. An information disclosure vulnerability exists in Cisco IOS Software and IOx Software. An attacker could exploit this vulnerability to obtain sensitive information and launch further attacks...

Cisco IOS for Catalyst 2960X and 3750X Switches Denial of Service Vulnerability (cisco-sa-20170118-catalyst)

A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthenticated, adjacent attacker to cause a memory leak in the software forwarding queue that would eventually lead to a partial denial of service DoS condition. SPDX-FileCopyrightText:...

Cisco IOS and Cisco IOx Software Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. The vulnerability is due to lack of proper input validation of the...

Cisco IOS Compliance Check

Runs the Cisco IOS Compliance Check with the provided policy file and stores the results in the kb. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Cisco IOS Compliance Check: Failed

Lists all the Cisco IOS Compliance Policy Checks which did NOT pass. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco IOS Compliance Check: Passes

Lists all the Cisco IOS Compliance Policy Check which passed it. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2016-9215

A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the root user. More Information: CSCva38434. Known Affected Releases: 6.1.1.BASE...