PT-2014-1134

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0, 15.1, 15.2, and 15.4 Cisco IOS XE versions 3.2.xXO, 3.3.xSG, 3.4.xSG, and 3.5.xE before 3.5.3E Description The issue is related to the EnergyWise module in Cisco IOS and Cisco IOS XE Software, which allows an...

Cisco EnergyWise Module Vulnerability

Cisco has released an advisory to address a vulnerability in the EnergyWise module of Cisco IOS and Cisco IOS XE Software. Exploitation of the vulnerability could allow an unauthenticated, remote attacker to cause a Denial of Service condition on the affected system. Users and administrators are...

Cisco IOS XE mDNS Manipulation (CSCun64867)

According to its self-reported version, the remote IOS XE device is affected by a manipulation vulnerability. A flaw exists due to unconstrained autonomic networking with mDNS multicast Domain Name System. This could allow a remote attacker to read or overwrite autonomic networking services...

Cisco IOS SNMP DoS (CSCug65204)

The remote Cisco device potentially contains an issue in the SNMP module which may allow remote authenticated users to cause a denial of service device reload via continuous SNMP polling requests. TRUSTED...

Code injection

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service chip and card hangs via malformed 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCuo68417...

CVE-2014-3322: Improper Input Validation

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service chip and card hangs via malformed 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCuo68417...

PT-2014-5216

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.3.2 and earlier Description The issue is related to improper NetFlow sampling of IP packets, which can be exploited by sending malformed IPv4 or IPv6 packets to cause a denial of service, resulting in chip and card hang...

CVE-2014-3321: Improper Input Validation

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

PT-2014-5215

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.3.4 and earlier Description The issue allows remote attackers to cause a denial of service via a series of crafted Multiprotocol Label Switching MPLS packets when bridge-group virtual interface BVI routing is enabled...

CVE-2014-3309

Summary of CVE-2014-3309 (Cisco) : The NTP implementation in Cisco IOS and IOS XE is vulnerable due to improper handling of the ntp access-group command in a deny-all configuration, potentially allowing a remote attacker to bypass NTP access restrictions and query the NTP server configured to den...

PT-2014-5204

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE affected versions not specified Description The issue is related to the improper implementation of the ntp access-group command in certain Cisco IOS Software and Cisco IOS XE Software versions. This allows an...

CVE-2014-3309: Undefined Security Weakness

The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318...

Design/Logic Flaw

Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted packets, aka Bug ID CSCun83985...

CVE-2014-3308: Improper Input Validation

Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted packets, aka Bug ID CSCun83985...

PT-2014-5203

Name of the Vulnerable Software and Affected Versions Cisco IOS XR on Trident line cards in ASR 9000 devices affected versions not specified Description The issue is related to a missing static punt policer for traffic destined to a device, which allows remote attackers to cause a denial of servi...

Cisco IOS 12.4(23) HTTP Server Multiple Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/33625/info Cisco IOS HTTP Server is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code ...

Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/2936/info IOS is router firmware developed and distributed by Cisco Systems. IOS functions on numerous Cisco devices, including routers and switches. It is possible to gain full remote administrative access on devices usi...

Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/2936/info IOS is router firmware developed and distributed by Cisco Systems. IOS functions on numerous Cisco devices, including routers and switches. It is possible to gain full remote administrative access on devices usi...

Cisco IOS 11.x/12.x HTTP Configuration Arbitrary Administrative Access Vulnerability (4)

No description provided by source. source: http://www.securityfocus.com/bid/2936/info IOS is router firmware developed and distributed by Cisco Systems. IOS functions on numerous Cisco devices, including routers and switches. It is possible to gain full remote administrative access on devices usi...

Cisco IOS Tiny Shellcode 1.0

No description provided by source. ---------------------------------------------------------------------------------------- Cisco IOS Tiny shellcode v1.0 c 2007 IRM Plc By Gyan Chawdhary ---------------------------------------------------------------------------------------- The code creates a ne...