CVE-2016-1366

The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service overwrite via unspecified vectors, aka Bug ID CSCuw75848...

CVE-2016-1366: Undefined Security Weakness

The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service overwrite via unspecified vectors, aka Bug ID CSCuw75848...

CVE-2016-1347: Undefined Security Weakness

The Wide Area Application Services WAAS Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service device reload via a crafted TCP segment, aka Bug ID CSCuq59708...

PT-2016-1616

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.3 and 15.4 Cisco IOS XE versions 3.8 through 3.11 Cisco Unified Communications Manager affected versions not specified Description The issue is related to improper processing of malformed SIP messages, which could allow a...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities could allow a remote attacker to create a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply...

PT-2016-1618

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.5 Cisco IOS XE versions 3.3 through 3.16 Description The issue is related to insufficient validation of DHCPv6 relay messages, which could allow an unauthenticated, remote attacker to cause an affected device...

PT-2016-1619

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.6 Cisco IOS XE versions 3.3 through 3.17 Description The issue is related to an improper handling of crafted, fragmented IKEv2 packets in the Internet Key Exchange IKE version 2 v2 fragmentation code of Cisco...

PT-2016-1617

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0, and 15.2 Cisco IOS XE versions 3.2 through 3.7 Description The vulnerability is due to incorrect handling of image list parameters in the Smart Install client feature, allowing an unauthenticated, remote attacker...

PT-2016-1575

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.5 Description The vulnerability in the Wide Area Application Services WAAS Express implementation allows remote attackers to cause a denial of service device reload via a crafted TCP segment. This is due to...

PT-2016-1574

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.0.0 through 5.2.5 Description The issue is related to weak permissions for system files in the SCP and SFTP modules, allowing remote authenticated users to cause a denial of service by overwriting system files. This is...

CVE-2016-1361

Cisco IOS XR through 4.3.2 on Gigabit Switch Router GSR 12000 devices does not properly check for a Bidirectional Forwarding Detection BFD header in a UDP packet, which allows remote attackers to cause a denial of service line-card restart via a crafted packet, aka Bug ID CSCuw56900...

Code injection

Cisco IOS XR through 4.3.2 on Gigabit Switch Router GSR 12000 devices does not properly check for a Bidirectional Forwarding Detection BFD header in a UDP packet, which allows remote attackers to cause a denial of service line-card restart via a crafted packet, aka Bug ID CSCuw56900...

CVE-2016-1361: Undefined Security Weakness

Cisco IOS XR through 4.3.2 on Gigabit Switch Router GSR 12000 devices does not properly check for a Bidirectional Forwarding Detection BFD header in a UDP packet, which allows remote attackers to cause a denial of service line-card restart via a crafted packet, aka Bug ID CSCuw56900...

PT-2016-1470

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions through 4.3.2 on Gigabit Switch Router GSR 12000 devices Cisco IOS affected versions not specified Description The issue is related to improper input validation for the presence of a Bidirectional Forwarding Detection BFD...

Cisco IOS Denial of Service Vulnerability (CNVD-2016-01211)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in Cisco IOS 15.53M and 15.61T0a on Cisco 1000 Connected Grid routers, which can be exploited by an attacker to cause a denial of service...

CVE-2016-1333

Cisco IOS 15.53M and 15.61T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service device reload via an SNMP request for unspecified BRIDGE MIB OIDs, aka Bug ID CSCux89878...

Cisco IOS Denial of Service Vulnerability (CNVD-2016-01126)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in the implementation of Cisco IOS 15.24E on Industrial Ethernet 2000 devices, which can be exploited by a remote attacker to cause a device reload an...

PT-2016-1473

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.53M and 15.61T0a Description The issue is related to resource management errors in the Cisco IOS operating system. It allows a remote authenticated user to cause a denial of service, resulting in a device reload, by sendi...

Cisco IOS Software for Cisco Industrial Ethernet 2000 Series Switches Denial of Service Vulnerability

A vulnerability in the processing of Cisco Discovery Protocol CDP packets by Cisco IOS Software for Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to improper processing of crafted CD...

CVE-2016-1330: Undefined Security Weakness

Cisco IOS 15.24E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial of service device reload via crafted Cisco Discovery Protocol CDP packets, aka Bug ID CSCuy27746...