Design/Logic Flaw

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

CVE-2015-0776

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

CVE-2015-0769: Undefined Security Weakness

Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...

CVE-2015-0771: Undefined Security Weakness

The IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500 devices allows remote authenticated users to cause a denial of service device reload by sending a crafted message during IPsec tunnel setup, aka Bug ID CSCur70505...

PT-2015-1424

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.2 Description The issue is related to the TCL interpreter component in Cisco IOS, which has inadequate access control to certain functions. This allows a local attacker to escalate privileges by executing a TCL script,...

PT-2015-1432

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.0.1 Description The issue is related to resource management errors in the telnetd subcomponent of the Cisco IOS operating system. It can be exploited by a remote attacker using a specially crafted telnet packet,...

CVE-2015-0776: Undefined Security Weakness

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

Cisco IOS XR Software Crafted IPv6 Packet Denial of Service Vulnerability

A vulnerability in the IP version 6 IPv6 processing code of Cisco IOS XR Software for Cisco CRS-3 Carrier Routing System could allow an unauthenticated, remote attacker to trigger an ASIC scan of the Network Processor Unit NPU and a reload of the line card processing an IPv6 packet. The...

PT-2015-1321

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System Description The issue is related to incorrect processing of IPv6 packets with valid but unlikely IPv6 extension headers, which can cause a denial of service. An attacke...

PT-2015-1433

Name of the Vulnerable Software and Affected Versions Cisco IOS version 12.2 on Catalyst 6500 devices Description The issue is related to the IKE implementation in the WS-IPSEC-3 service module, which allows remote authenticated users to cause a denial of service by sending a crafted message duri...

Cisco IOS ISDN Implementation Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. A security vulnerability in the Cisco IOS ISDN implementation allows remote attackers to conduct denial of service attacks by submitting malformed Q931 SETUP messages...

Cisco IOS XE Software Overlay Transport Virtualization (OTV) DoS

The remote Cisco device is affected by a denial of service vulnerability due to improper processing of oversized Overlay Transport Virtualization OTV frames. An unauthenticated, adjacent attacker can exploit this, by sending a large number of oversized OTV frames requiring fragmentation and...

CVE-2015-0731: Undefined Security Weakness

The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service device reload via malformed Q931 SETUP messages, aka Bug ID CSCut37890...

PT-2015-4846

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.3S Description The issue is related to the improper processing of malformed ISDN Q931 SETUP messages in the ISDN implementation, which can cause a denial of service device reload. An unauthenticated, adjacent attacker can...

Cisco UCS Central Software Security Vulnerabilities Patched

Cisco has patched a serious remote code execution vulnerability in its Unified Computing System UCS Central software, a data center platform that integrates processing, networking, storage and virtualization into one system. “An attacker could exploit this vulnerability by sending a crafted HTTP...

CVE-2015-0709

Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service device crash by leveraging knowledge of the RADIUS secret and sending crafted RADIUS packets, aka Bug ID CSCur21348...

Input validation

The Overlay Transport Virtualization OTV implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service device reload via a series of packets that are considered oversized and trigger improper fragmentation handling, aka Bug IDs CSCup37676 and CSCup30335...

CVE-2015-0710

The Overlay Transport Virtualization OTV implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service device reload via a series of packets that are considered oversized and trigger improper fragmentation handling, aka Bug IDs CSCup37676 and CSCup30335...

CVE-2015-0708: Undefined Security Weakness

Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service device crash by including an IANA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956...

Cisco IOS XE Overlay Transport Virtualization Denial of Service Vulnerability

Cisco IOS XE is an operating system developed by the American company Cisco Cisco for its network equipment. A security vulnerability exists in the Overlay Transport Virtualization OTV implementation of Cisco IOS XE version 3.10S. A remote attacker could exploit this vulnerability to cause a deni...