PT-2016-6867

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.3 Description A vulnerability in the Common Industrial Protocol CIP feature could allow an unauthenticated, remote attacker to create a denial of service DoS condition by submitting a crafted CIP...

PT-2016-6869

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 and 15.0 through 15.6 Cisco IOS XE versions 2.1 through 3.18 and 16.2 Description The issue is related to the Authentication, Authorization, and Accounting AAA service for remote Secure Shell Host SSH...

PT-2016-6865

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.2 Cisco IOS XE versions 3.2 through 3.8 Description The Smart Install client feature in Cisco IOS and IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to...

Cisco IOS XR IKEv1 Packet Handling Remote Information Disclosure (cisco-sa-20160916-ikev1) (BENIGNCERTAIN)

According to its self-reported version and configuration, the Cisco IOS XR software running on the remote device is affected by an information disclosure vulnerability, known as BENIGNCERTAIN, in the Internet Key Exchange version 1 IKEv1 subsystem due to improper handling of IKEv1 security...

Cisco IOS IKEv1 Packet Handling Remote Information Disclosure (cisco-sa-20160916-ikev1) (BENIGNCERTAIN)

According to its self-reported version and configuration, the Cisco IOS software running on the remote device is affected by an information disclosure vulnerability, known as BENIGNCERTAIN, in the Internet Key Exchange version 1 IKEv1 subsystem due to improper handling of IKEv1 security negotiati...

Cisco IOS XE IKEv1 Packet Handling Remote Information Disclosure (cisco-sa-20160916-ikev1) (BENIGNCERTAIN)

According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by an information disclosure vulnerability, known as BENIGNCERTAIN, in the Internet Key Exchange version 1 IKEv1 subsystem due to improper handling of IKEv1 security...

CVE-2016-6410

The Cisco Application-hosting Framework CAF component in Cisco IOS 15.61T1 and IOS XE, when the IOx feature set is enabled, allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuy19856...

Code injection

The Cisco Application-hosting Framework CAF component in Cisco IOS 15.61T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773...

CVE-2016-6410: Improper Input Validation

The Cisco Application-hosting Framework CAF component in Cisco IOS 15.61T1 and IOS XE, when the IOx feature set is enabled, allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuy19856...

CVE-2016-6412: Improper Input Validation

The Cisco Application-hosting Framework CAF component in Cisco IOS 15.61T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773...

CVE-2016-6409: Undefined Security Weakness

The Data in Motion DMo component in Cisco IOS 15.61T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service out-of-bounds access via crafted traffic, aka Bug ID CSCuy54015...

Cross site scripting

The Zone-Based Firewall ZBFW functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attackers to bypass intended resource-access restrictions via spoofed traffic that matches one of these...

CVE-2016-6414: Improper Neutralization of Special Elements used in an OS Command

iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223...

PT-2016-3487

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.4 Cisco IOS XE versions prior to 3.13 Description The issue concerns the Zone-Based Firewall functionality, which improperly handles zone checking for existing sessions. This allows remote attackers to bypass...

CVE-2014-2146: Improper Input Validation

The Zone-Based Firewall ZBFW functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attackers to bypass intended resource-access restrictions via spoofed traffic that matches one of these...

PT-2016-6883

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.61T and earlier Cisco IOS XE affected versions not specified Description The issue is related to insufficient bounds checks in the Data in Motion DMo component when the IOx feature set is enabled. This allows remote...

PT-2016-6888

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.6 and earlier Cisco IOS XE versions 3.18 and earlier Description A vulnerability exists in the iox command that could allow an authenticated, local attacker to perform command injection into the IOx Linux guest operating...

PT-2016-6884

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.61T1 and later Cisco IOS XE affected versions not specified Description The issue allows remote authenticated users to read arbitrary files due to insufficient input validation by the affected framework. An attacker could...

PT-2016-6886

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.61T1 and later Cisco IOS XE affected versions not specified Description A issue in the Cisco Application-hosting Framework CAF component allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP...

CVE-2016-6415

CVE-2016-6415 is an information-disclosure vulnerability in Cisco IOS, IOS XE, IOS XR (and PIX prior to 7.0) where the IKEv1 security-negotiation code lacks sufficient checks, enabling an unauthenticated remote attacker to read memory contents via an SA negotiation request. Affected products span...