PT-2015-4831

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.10S Description A vulnerability exists in the Overlay Transport Virtualization OTV implementation, allowing remote attackers to cause a denial of service device reload via a series of packets that trigger improper...

PT-2015-4829

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.4S, 15.4SN, and 15.5S Cisco IOS XE versions 3.13S and 3.14S Description The issue is due to improper handling of DHCPv6 packets for a SOLICIT message for an Identity Association for Non-Temporary Addresses IA-NA by a devi...

PT-2015-4830

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.5S and earlier Cisco IOS XE affected versions not specified Description A denial of service issue exists due to improper processing of crafted RADIUS packets. An authenticated, remote attacker could exploit this by sendin...

Cisco IOS DoS

The vulnerability of the Cisco IOS operating system allows a remote attacker to trigger a service failure device reboot by sending specially crafted UDP packets over the CIP protocol...

CVE-2015-0695: Undefined Security Weakness

Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual interface BVI traffic, which allows remote attackers to cause a denial of service chip and card hangs and reloads by triggering use of a BVI interface...

PT-2015-4817

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.3.4 through 5.3.0 Description The issue is due to improper handling of bridge-group virtual interface BVI traffic when certain features are configured, such as Unicast Reverse Path Forwarding uRPF, policy-based routing...

Cisco IOS Autonomic Networking Infrastructure Multiple Vulnerabilities (cisco-sa-20150325-ani)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by the following vulnerabilities in the Autonomic Networking Infrastructure ANI : - A flaw exists in the ANI implementation due to failing to properly validate Autonomic Networking AN response...

Cisco IOS XE Autonomic Networking Infrastructure Multiple Vulnerabilities (cisco-sa-20150325-ani)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by the following vulnerabilities : - A flaw exists in the ANI due to failing to properly validate Autonomic Networking AN messages. This could allow a remote attacker to spoof an Autonomic...

Cisco IOS XE AppNav Component RCE

The Cisco IOS XE software running on the remote device is affected by a vulnerability in the AppNav component due to the improper processing of TCP packets. An unauthenticated, remote attacker, using a crafted TCP packet, can exploit this to cause a device reload or to execute arbitrary code in t...

CVE-2015-0688: Undefined Security Weakness

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

Cisco ASR1000 Series Routers ESP Module Denial of Service Vulnerability

A vulnerability in the Embedded Services Processor ESP module of Cisco ASR 1000 Series Routers running Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of malformed H.323 packets by an...

CVE-2015-0687: Undefined Security Weakness

The SNMP implementation in Cisco IOS 15.12SG4 on Catalyst 4500 devices, when single-switch Virtual Switching System VSS is configured, allows remote authenticated users to cause a denial of service device crash by performing SNMP polling, aka Bug ID CSCuq04574...

CVE-2015-0685: Improper Input Validation

Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service device hang via crafted IP packets, aka Bug ID CSCub31873...

Cisco IOS IKEv2 DoS (cisco-sa-20150325-ikev2)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 2 IKEv2 subsystem due to improper handling of specially crafted IKEv2 packets. A remote, unauthenticated attacker can...

Cisco IOS XE IKEv2 DoS (cisco-sa-20150325-ikev2)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 2 IKEv2 subsystem due to improper handling of specially crafted IKEv2 packets. A remote, unauthenticated attacker ca...

PT-2015-4811

Name of the Vulnerable Software and Affected Versions Cisco IOS XE version 3.10.2S Description The issue is caused by improper handling of malformed H.323 packets by an affected device when the device is configured to use Network Address Translation NAT. An unauthenticated, remote attacker could...

Cisco IOS Software TCP CIP DoS

According to its self-reported version, the Cisco IOS software running on the remote device is affected by multiple flaws in the Common Industrial Protocol CIP implementation that allow a remote, unauthenticated attacker to cause a denial of service DoS condition, as follows: - A denial of servic...

Cisco IOS Software TCP Memory Leak DoS (cisco-sa-20150325-tcpleak)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a memory leak issue in the TCP input module when establishing a three-way handshake. An unauthenticated, remote attacker can exploit this issue, via specially crafted TCP packets, to consume...

Cisco IOS Software VRF ICMP Queue Wedge DoS (cisco-sa-20150325-wedge)

The Cisco IOS software running on the remote device is affected by a vulnerability in the Virtual Routing and Forwarding VRF interface due to improperly processing crafted ICMPv4 messages, which leaves the packet queue uncleared. A remote remote attacker can exploit this to cause a 'queue wedge' ...

Cisco Catalyst 4500 SNMP Polling Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP code of Cisco Catalyst 4500 devices running Cisco IOS Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to an unspecified condition that exists during SNMP...