CVE-2014-7992: Exposure of Sensitive Information to an Unauthorized Actor

The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensitive credential information from process memory via a session on TCP port 2067, aka Bug ID CSCur14014...

PT-2014-8364

Name of the Vulnerable Software and Affected Versions Cisco IOS affected versions not specified Description The DLSw implementation in Cisco IOS contains a flaw that allows remote attackers to obtain sensitive credential information from process memory via a session on TCP port 2067. This is due ...

CVE-2014-7997

The DHCP implementation in Cisco IOS on Aironet access points does not properly handle error conditions with short leases and unsuccessful lease-renewal attempts, which allows remote attackers to cause a denial of service device restart by triggering a transition into a recovery state that was...

PT-2014-8370

Name of the Vulnerable Software and Affected Versions Cisco IOS on Aironet access points affected versions not specified Description The issue allows remote attackers to cause a denial of service via a malformed EAP packet when "dot11 aaa authenticator" debugging is enabled. Recommendations At th...

PT-2014-8369

Name of the Vulnerable Software and Affected Versions Cisco IOS on Aironet access points affected versions not specified Description The issue is related to the DHCP implementation, which does not handle error conditions properly, specifically with short leases and unsuccessful lease-renewal...

CVE-2014-7997: Undefined Security Weakness

The DHCP implementation in Cisco IOS on Aironet access points does not properly handle error conditions with short leases and unsuccessful lease-renewal attempts, which allows remote attackers to cause a denial of service device restart by triggering a transition into a recovery state that was...

CVE-2014-7998: Undefined Security Weakness

Cisco IOS on Aironet access points, when "dot11 aaa authenticator" debugging is enabled, allows remote attackers to cause a denial of service via a malformed EAP packet, aka Bug ID CSCul15509...

Cisco IOS XE Crafted MPLS IP Fragmentation DoS (CSCul00709)

According to its self-reported version, the remote IOS XE device is affected by a denial of service vulnerability. A denial of service flaw exists the Multiprotocol Label Switching MPLS IP fragmentation function of Cisco XE. An unauthenticated, remote attacker with a specially crafted MPLS IP...

Command injection

Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, which allows local users to obtain Linux root access by leveraging administrative privilege, aka Bug ID CSCur09815...

CVE-2014-7990: Improper Input Validation

Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, which allows local users to obtain Linux root access by leveraging administrative privilege, aka Bug ID CSCur09815...

PT-2014-8362

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.5E and earlier Description A vulnerability exists due to improper parsing of the challenge response in the request system shell command. This allows an authenticated, local attacker with administrative privilege to acce...

Code injection

Cisco IOS 15.43S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet processing, which allows remote attackers to cause a denial of service BGP neighbor flapping by sending many crafted IPv4 packets, aka Bug ID CSCuo29736...

PT-2014-5188

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.43S0b on ASR901 devices Description The issue allows remote attackers to cause a denial of service, specifically BGP neighbor flapping, by sending many crafted IPv4 packets. This occurs because the software makes incorrect...

CVE-2014-3293: Undefined Security Weakness

Cisco IOS 15.43S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet processing, which allows remote attackers to cause a denial of service BGP neighbor flapping by sending many crafted IPv4 packets, aka Bug ID CSCuo29736...

Command injection

The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...

PT-2014-5298

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.233SRE9a Cisco IOS XE versions prior to 3.13S Description The issue affects the Ethernet Connectivity Fault Management handling feature, allowing remote attackers to cause a denial of service by sending malformed...

CVE-2014-3409: Undefined Security Weakness

The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...

Cisco IOS XE Software Autonomic Networking Infrastructure Certificate Validation Vulnerability

A vulnerability in certificate validation for Autonomic Networking Infrastructure ANI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to masquerade as another device. The vulnerability is due to incomplete certificate validation. An attacker could exploit this vulnerabili...

Design/Logic Flaw

Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks aka RPL on both the Autonomic Control Plane ACP and external Autonomic Networking Infrastructure ANI interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an AN...

Design/Logic Flaw

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647...