PT-2016-1177

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.24E on Industrial Ethernet 2000 devices Description The issue is related to errors in resource management and can be exploited by sending crafted Cisco Discovery Protocol CDP packets, which may cause a denial of service...

PT-2016-3857

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p7 Cisco IOS affected versions not specified Description The issue allows remote attackers to conduct replay attacks by sniffing the network. It is related to the ntpq protocol in NTP. There is also a vulnerability i...

PT-2016-3856

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p7 Cisco IOS affected versions not specified Description The issue allows remote attackers to obtain origin timestamps and then impersonate peers. There is also a vulnerability in Cisco IOS, but details are not...

Cisco IOS XR Detection Consolidation

Consolidation of Cisco IOS XR detections. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.105532"...

Cisco IOS DoS

The vulnerability of the Cisco IOS operating system does not limit the number of PCE elements used for OSPF LSA updates. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco IOS XE Source MAC Address DoS (CSCux48405)

According to its self-reported version, the Cisco IOS XE software running on the remote device is Release 16.1.1. It is, therefore, affected by a denial of service vulnerability due to incorrect processing of packets that have 0000:0000:0000 as a source MAC address. An unauthenticated, adjacent...

CVE-2015-6432

Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements PCEs for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service device reload via a crafted update, aka Bug ID...

CVE-2015-6432: Undefined Security Weakness

Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements PCEs for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service device reload via a crafted update, aka Bug ID...

PT-2016-1017

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.2.0 through 5.3.2 Description The issue is related to the handling of Open Shortest Path First OSPF Link State Advertisement LSA updates, specifically with the number of Path Computation Elements PCEs configured for an...

CVE-2015-6431: Undefined Security Weakness

Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service device reload via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405...

Cisco IOS and IOS XE Software IKEv1 State Machine Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in the IKEv1 state machine of Cisco IOS and Cisco IOS XE Software. An unauthenticated, remote attacker sending spoofed IKEv1 packets to the endpoint o...

PT-2015-7251

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 16.1.1 Description The issue is caused by incorrect processing of packets with a source MAC address of 0000:0000:0000, allowing an unauthenticated, adjacent attacker to cause the device to reload by sending a frame with a...

Design/Logic Flaw

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service IPsec connection termination via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236...

CVE-2015-6429

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service IPsec connection termination via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236...

CVE-2015-6429: Undefined Security Weakness

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service IPsec connection termination via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236...

PT-2015-7250

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.4 through 15.6 Cisco IOS XE versions 3.15 through 3.17 Description The issue is related to the IKEv1 state machine in Cisco IOS and Cisco IOS XE Software, which allows an unauthenticated, remote attacker to tear down vali...

Cisco IOS XE Software IPv6 Neighbor Discovery DoS (CSCup28217)

The remote Cisco IOS XE device is missing a vendor-supplied security patch, and is not configured to limit the IPv6 neighbor discovery ND cache. It is, therefore, affected by a denial of service vulnerability due to insufficient bounds on internal tables. An unauthenticated, adjacent attacker can...

Code injection

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS 15.33S0.1 on ASR devices mishandles internal tables, which allows remote attackers to cause a denial of service memory consumption or device crash via a flood of crafted ND messages, aka Bug ID CSCup28217...

CVE-2015-6359: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS 15.33S0.1 on ASR devices mishandles internal tables, which allows remote attackers to cause a denial of service memory consumption or device crash via a flood of crafted ND messages, aka Bug ID CSCup28217...

PT-2015-3041

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.33S0.1 Description The issue is related to the Neighbor Discovery ND protocol implementation in the IPv6 stack, which mishandles internal tables. This allows remote attackers to cause a denial of service, such as memory...