Design/Logic Flaw

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid message via crafted messages, aka Bug ID CSCuq22677...

CVE-2014-3405

Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks aka RPL on both the Autonomic Control Plane ACP and external Autonomic Networking Infrastructure ANI interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an AN...

CVE-2014-3404

Cisco IOS XE's Autonomic Networking Infrastructure (ANI) has a certificate validation vulnerability (CVE-2014-3404) due to incomplete certificate validation in the ANI component. A remote attacker could send crafted messages to the ANI device and cause acceptance of an invalid message. The Cisco ...

CVE-2014-3403: Undefined Security Weakness

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647...

CVE-2014-3404: Undefined Security Weakness

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid message via crafted messages, aka Bug ID CSCuq22677...

CVE-2014-3405: Undefined Security Weakness

Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks aka RPL on both the Autonomic Control Plane ACP and external Autonomic Networking Infrastructure ANI interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an AN...

PT-2014-5294

Name of the Vulnerable Software and Affected Versions Cisco IOS XE affected versions not specified Description The issue allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an ANI interface. This is due to the IPv6 Routing Protocol for Low-Power and Lossy...

PT-2014-5293

Name of the Vulnerable Software and Affected Versions Cisco IOS XE affected versions not specified Description The issue is related to incomplete certificate validation in the Autonomic Networking Infrastructure ANI component. This allows remote attackers to trigger acceptance of an invalid messa...

PT-2014-5292

Name of the Vulnerable Software and Affected Versions Cisco IOS XE affected versions not specified Description The issue is related to incomplete certificate validation in the Autonomic Networking Infrastructure ANI component, allowing remote attackers to masquerade as another device by sending...

Cisco IOS DHCP Remember Functionality DoS (CSCuh46822)

According to its self-reported version, the remote IOS device is affected by a denial of service vulnerability when the remember functionality of DHCP is enabled. A flaw exists where the remember functionality does not correctly handle the releasing of leases. An attacker can exploit this issue b...

CVE-2014-3396: Undefined Security Weakness

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133...

PT-2014-5286

Name of the Vulnerable Software and Affected Versions Cisco IOS XR on ASR 9000 devices affected versions not specified Description The issue is related to the improper use of compression for port-range and address-range encoding in access control lists ACLs on Typhoon line cards in Cisco ASR 9000...

Cisco IOS Software SIP DoS (cisco-sa-20140924-sip)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a vulnerability in the Session Initiation Protocol SIP implementation due to improper handling of SIP messages. A remote attacker can exploit this issue by sending specially crafted SIP...

Cisco IOS XE Software SIP DoS (cisco-sa-20140924-sip)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a vulnerability in the Session Initiation Protocol SIP implementation due to improper handling of SIP messages. A remote attacker can exploit this issue by sending specially crafted SIP...

Cisco IOS XE Software DHCPv6 DoS (cisco-sa-20140924-dhcpv6)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the DHCP version 6 DHCPv6 implementation due to improper handling of DHCPv6 packets. A remote attacker can exploit this issue by sending specially...

Cisco IOS Software RSVP DoS (cisco-sa-20140924-rsvp)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the Resource Reservation Protocol RSVP implementation due to improper handling of RSVP packets. A remote attacker can exploit this issue by sending...

Cisco IOS Software Multiple mDNS Gateway DoS Vulnerabilities (cisco-sa-20140924-mdns)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by two unspecified denial of service vulnerabilities in the multicast DNS mDNS implementation. A remote attacker can exploit this issue by sending a specially crafted mDNS packet to cause the...

Cisco IOS XE Software RSVP DoS (cisco-sa-20140924-rsvp)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the Resource Reservation Protocol RSVP implementation due to improper handling of RSVP packets. A remote attacker can exploit this issue by sending...

Cisco IOS XE Software Multiple mDNS Gateway DoS Vulnerabilities (cisco-sa-20140924-mdns)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by two unspecified denial of service vulnerabilities in the multicast DNS mDNS implementation. A remote attacker can exploit this issue by sending a specially crafted mDNS packet to cause th...

Cisco IOS Software Network Address Translation (NAT) ALG Module DoS (cisco-sa-20140924-nat)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the Network Address Translation NAT application-layer gateway ALG module. This issue exists due to improper handling of multipart Session Description...