PT-2014-2225

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.11SY on ASR 1000 devices Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via crafted Multicast Listener Discovery MLD packets when MLD tracking is enabled...

CVE-2012-4638: Undefined Security Weakness

Cisco IOS before 15.11SY allows local users to cause a denial of service device reload by establishing an outbound SSH session, aka Bug ID CSCto00318...

CVE-2012-4658: Improper Authentication

The ios-authproxy implementation in Cisco IOS before 15.11SY3 allows remote attackers to cause a denial of service webauth and HTTP service outage via vectors that trigger incorrectly terminated HTTP sessions, aka Bug ID CSCtz99447...

PT-2014-2292

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.11SY3 Description The issue concerns the Flex-VPN load-balancing feature in the ipsec-ikev2 implementation, which does not require authentication. This allows remote attackers to trigger the forwarding of VPN...

CVE-2012-5032: Improper Authentication

The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.11SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an...

CVE-2012-5037: Undefined Security Weakness

The ACL implementation in Cisco IOS before 15.11SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service device reload via a "no object-group" command followed by an object-group command, aka Bug ID CSCts16133...

CVE-2012-0360: Undefined Security Weakness

Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...

PT-2014-2290

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.12SY Description The issue allows remote authenticated users to cause a denial of service, resulting in a device crash. This can be achieved by establishing an SSH session from a client and then placing this clie...

CVE-2012-5036: Undefined Security Weakness

Cisco IOS before 12.250SY1 allows remote authenticated users to cause a denial of service memory consumption via a sequence of VTY management sessions aka exec sessions, aka Bug ID CSCtn43662...

PT-2014-2293

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.250SY1 Description The issue allows remote authenticated users to cause a denial of service, specifically memory consumption, by initiating a sequence of VTY management sessions, also known as exec sessions...

CVE-2012-5427: Improper Input Validation

Cisco IOS Unified Border Element CUBE in Cisco IOS before 15.32T allows remote authenticated users to cause a denial of service input queue wedge via a crafted series of RTCP packets, aka Bug ID CSCuc42518...

CVE-2012-5044: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco IOS before 15.31T, when media flow-around is not used, allows remote attackers to cause a denial of service media loops and stack memory corruption via VoIP traffic, aka Bug ID CSCub45809...

PT-2014-2262

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.11SY Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption or device crash, via MLD packets on a network with many IPv6 hosts. Recommendations For versions prior...

CVE-2012-1366: Improper Input Validation

Cisco IOS before 15.11SY on ASR 1000 devices, when Multicast Listener Discovery MLD tracking is enabled for IPv6, allows remote attackers to cause a denial of service device reload via crafted MLD packets, aka Bug ID CSCtz28544...

Cisco IOS Server HTTP Interface Cross Site Scripting - Ver2 (CVE-2005-3921)

A cross-site scripting vulnerability has been reported in Cisco Ios. An attacker could exploit this vulnerability an HTTP interface to the contents of memory buffers. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Cisco IOS XR ICMPv6重定向处理拒绝服务漏洞

CVE ID:CVE-2014-2144 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS XR 4.3.1.K9SEC及其他版本处理ICMPv6重定向数据包时出错，如果攻击者向受影响设备发送特制的 ICMPv6 重定向数据，此漏洞可造成几乎所有IPv4及IPv6通讯失败。 0 Cisco IOS XR 4.3.1.K9SEC 目前没有详细解决方案： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2144...

CVE-2014-2144: Improper Input Validation

Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service IPv4 and IPv6 transit outage via crafted redirect messages, aka Bug ID CSCum14266...

PT-2014-4509

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue is related to the improper throttling of ICMPv6 redirect packets, which can be exploited by remote attackers to cause a denial of service. This can result in an IPv4 and IPv6...

Design/Logic Flaw

The IKE implementation in Cisco IOS 15.41T and earlier and IOS XE allows remote attackers to cause a denial of service security-association drop via crafted Main Mode packets, aka Bug ID CSCun31021...

CVE-2014-2143: Undefined Security Weakness

The IKE implementation in Cisco IOS 15.41T and earlier and IOS XE allows remote attackers to cause a denial of service security-association drop via crafted Main Mode packets, aka Bug ID CSCun31021...