6770 matches found
PT-2016-7701
Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software version 6.1.1.BASE Description A vulnerability in the HTTP 2.0 request handling code could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash, resulting in a denial of...
PT-2016-6946
Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE Software versions prior to 15.24E1 Cisco IOS and IOS XE Software versions prior to 15.24E2 Cisco IOS and IOS XE Software versions prior to 15.24E3 Cisco IOS and IOS XE Software versions prior to 15.24EA4 Cisco IOS and IOS ...
CVE-2016-6450
A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying operating system. This vulnerability affects the following products if they are running a vulnerable release of Cisco IOS XE...
CVE-2016-6450: Improper Input Validation
A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying operating system. This vulnerability affects the following products if they are running a vulnerable release of Cisco IOS XE...
Cisco IOS XE Software Directory Traversal Vulnerability
A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying operating system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced source...
PT-2016-6923
Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 3.70 through 16.4.1 Cisco IOS XE Software versions Denali-16.1.3 through Denali-16.3.1 Description A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local...
Cisco IOS XE IKEv1 Fragmentation DoS (cisco-sa-20160928-ikev1)
According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 1 IKEv1 subsystem due to improper handling of fragmented IKEv1 packets. An unauthenticated, remote...
Cisco IOS IKEv1 Fragmentation DoS (cisco-sa-20160928-ios-ikev1)
According to its self-reported version and configuration, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 1 IKEv1 subsystem due to improper handling of fragmented IKEv1 packets. An unauthenticated, remote...
Cisco IOS XE TL1 Request Handling RCE (cisco-sa-20161102-tl1)
According to its self-reported version and model, the Cisco IOS XE software running on the remote ASR device is affected by a remote code execution vulnerability in the Transaction Language 1 TL1 code due to an overflow condition caused by improper bounds checking on certain input when handling T...
Design/Logic Flaw
A vulnerability in the Transaction Language 1 TL1 code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers ASR902, ASR90...
CVE-2016-6441
A vulnerability in the Transaction Language 1 TL1 code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers ASR902, ASR90...
CVE-2016-6441
CVE-2016-6441 affects Cisco ASR 900 Series Aggregation Services Routers (ASR902/903/907) running Cisco IOS XE, where the TL1 code processes input and fails bounds checks, allowing an unauthenticated remote attacker to cause a reload or execute arbitrary code. Affected releases include 3.17.0S–3.1...
CVE-2016-6441: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability in the Transaction Language 1 TL1 code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers ASR902, ASR90...
CVE-2016-6438: Undefined Security Weakness
A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. This vulnerability affects the following releases of Cisco IOS...
Cisco IOS Software CIP Request DoS (cisco-sa-20160928-cip)
According to its self-reported version and configuration, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Common Industrial Protocol CIP feature due to improper processing of unusual but valid CIP requests. An unauthenticated, remote...
Cisco IOS XR Elevation of Privilege Vulnerability
Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A root elevation of privilege vulnerability exists in Cisco IOS XR version 6.1.1, which allows local users to execute arbitrary operating system commands as root by leveraging...
PT-2016-6912
Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers versions 15.53S2.9 through 15.62SP Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers versions 3.16S through 3.18.1S Description A vulnerability in...
Cisco IOS Multicast Routing Multiple DoS (cisco-sa-20160928-msdp)
According to its self-reported version number and configuration, the remote Cisco IOS device is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to improper validation of packets encapsulated in a PIM register message. An unauthenticated,...
Cisco IOS XE Multicast Routing Multiple DoS (cisco-sa-20160928-msdp)
According to its self-reported version number and configuration, the remote Cisco IOS XE device is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to improper validation of packets encapsulated in a PIM register message. An unauthenticated,...