PT-2014-5268

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.1 and earlier Description A vulnerability in TACACS+ processing allows an unauthenticated, remote attacker to cause a reload of the TACACS+ daemon tacacsd on the affected device. The issue is due to improper parsing of ...

PT-2014-5266

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.1 and earlier Description A vulnerability in RSVP processing could allow an unauthenticated, remote attacker to cause a reload of the RSVP process on the affected device. The issue is due to improper parsing of a...

PT-2014-5269

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.1 and earlier Description The issue allows remote attackers to cause a denial of service via a malformed MPLS packet. It is due to insufficient logic in parsing MPLS packets, which could allow an unauthenticated, adjace...

Cisco IOS XR NetFlow and Network Processor (NP) Chip DoS (Typhoon-based Line Cards)

The remote Cisco device is running a version of Cisco IOS XR software that is potentially affected by a denial of service vulnerability related the handling of a maliciously crafted packet with a multicast destination MAC address routed by a bridge-group virtual interface. Note that this issue on...

CVE-2014-3342

The CLI in Cisco IOS XR allows remote authenticated users to obtain sensitive information via unspecified commands, aka Bug IDs CSCuq42336, CSCuq76853, CSCuq76873, and CSCuq45383...

Information disclosure

The CLI in Cisco IOS XR allows remote authenticated users to obtain sensitive information via unspecified commands, aka Bug IDs CSCuq42336, CSCuq76853, CSCuq76873, and CSCuq45383...

CVE-2014-3342

The CLI in Cisco IOS XR allows remote authenticated users to obtain sensitive information via unspecified commands, aka Bug IDs CSCuq42336, CSCuq76853, CSCuq76873, and CSCuq45383...

PT-2014-5234

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information via unspecified commands. Recommendations At the moment, there is no information about a newer version that...

CVE-2014-3342: Undefined Security Weakness

The CLI in Cisco IOS XR allows remote authenticated users to obtain sensitive information via unspecified commands, aka Bug IDs CSCuq42336, CSCuq76853, CSCuq76873, and CSCuq45383...

CVE-2014-3343: Improper Input Validation

Cisco IOS XR 5.1 allows remote attackers to cause a denial of service DHCPv6 daemon crash via a malformed DHCPv6 packet, aka Bug ID CSCuo59052...

PT-2014-5235

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.1 Description A vulnerability in the DHCP version 6 DHCPv6 code could allow an unauthenticated, remote attacker to cause the DHCPv6 server process on an affected device to crash. The issue is due to incorrect handling of...

CVE-2014-3353: Undefined Security Weakness

Cisco IOS XR 4.3.2 and earlier, as used in Cisco Carrier Routing System CRS, allows remote attackers to cause a denial of service CPU consumption and IPv6 packet drops via a malformed IPv6 packet, aka Bug ID CSCuo95165...

PT-2014-5245

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.3.2 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and IPv6 packet drops, via a malformed IPv6 packet. Recommendations For Cisco IOS XR versions 4.3....

Cisco IOS XR Detection (SNMP)

SNMP based detection of Cisco IOS XR. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.105079";...

CVE-2014-3347: Undefined Security Weakness

Cisco IOS 15.14M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service device hang by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid...

CVE-2014-3335: Improper Input Validation

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service chip and card hangs via a crafted packet, aka Bug ID CSCup77750...

PT-2014-5227

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.3.2 and earlier Description The issue is related to improper NetFlow sampling of packets with multicast destination MAC addresses, which can cause a denial of service. This can be exploited by an unauthenticated, adjace...

Design/Logic Flaw

The EnergyWise module in Cisco IOS 12.2, 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.2.xXO, 3.3.xSG, 3.4.xSG, and 3.5.xE before 3.5.3E allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCup52101...

CVE-2014-3327: Improper Input Validation

The EnergyWise module in Cisco IOS 12.2, 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.2.xXO, 3.3.xSG, 3.4.xSG, and 3.5.xE before 3.5.3E allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCup52101...

Cisco IOS XE NTP Information Disclosure (CSCuj66318)

The remote Cisco device potentially contains an issue with the 'ntp access-group' which could allow a remote attacker to bypass the NTP access group and query an NTP server configured to deny-all requests. TRUSTED...