Code injection

Cisco IOS 15.12SY3 and earlier, when used with Supervisor Engine 2T aka Sup2T on Catalyst 6500 devices, allows remote attackers to cause a denial of service device crash via crafted multicast packets, aka Bug ID CSCuf60783...

CVE-2014-2124

CVE-2014-2124 affects Cisco IOS 15.1(2)SY3 and earlier on Catalyst 6500 with Supervisor Engine 2T (Sup2T). The root cause is incorrect processing of multicast traffic by the Sup2T, allowing remote attackers to cause a denial of service (device crash). Cisco’s advisory confirms the vulnerability a...

CVE-2014-2124: Undefined Security Weakness

Cisco IOS 15.12SY3 and earlier, when used with Supervisor Engine 2T aka Sup2T on Catalyst 6500 devices, allows remote attackers to cause a denial of service device crash via crafted multicast packets, aka Bug ID CSCuf60783...

PT-2014-4494

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.12SY3 and earlier Description The issue is caused by incorrect processing of multicast traffic, allowing an unauthenticated, remote attacker to crash the device by sending crafted packets. This can lead to a denial of...

Cisco IOS FTP Server Remote Buffer Overflow - Ver2 (CVE-2007-2586)

A buffer overflow vulnerability has been reported in Cisco IOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco IOS Software IP Device Tracking DoS

A vulnerability in the IP Device Tracking function in Cisco IOS could allow a remote, unauthenticated attacker to trigger a denial of service condition resulting in a reload of the device. It should be noted that while the vendor describes a possible workaround, this plugin does not test for the...

Cisco IOS XE Software TFTP DoS

A vulnerability in the flow manager code in Cisco IOS XE could allow a remote, unauthenticated attacker to trigger a denial of service condition resulting in a crash of the device by sending specially generated TFTP UDP traffic. It should be noted that this plugin merely checks for an affected IO...

Cisco IOS XE Software IP Device Tracking DoS

A vulnerability in the IP Device Tracking function in Cisco IOS XE could allow a remote, unauthenticated attacker to trigger a denial of service condition resulting in a reload of the device. It should be noted that while the vendor describes a possible workaround, this plugin does not test for t...

CVE-2013-6981: Improper Input Validation

Cisco IOS XE 3.7S.1 and earlier allows remote attackers to cause a denial of service Packet Processor crash via fragmented MPLS IP packets, aka Bug ID CSCul00709...

PT-2013-6218

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.7S.1 and earlier Description A vulnerability in the Multiprotocol Label Switching MPLS IP fragmentation function could allow an unauthenticated, remote attacker to cause the Cisco Packet Processor to crash. The issue is...

CVE-2013-6979

The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP address, aka Bug ID CSCuj90227...

CVE-2013-6979: Improper Authentication

The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP address, aka Bug ID CSCuj90227...

PT-2013-6217

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 03.02.xxSE through 03.03.xxSE Description The issue arises from the VTY authentication implementation in Cisco IOS XE, which incorrectly relies on the Linux-IOS internal-network configuration. This allows remote attackers...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability (cisco-sa-20120530-iosxr)

Cisco IOS XR Software contains a vulnerability when handling crafted packets that may result in a denial of service condition. The vulnerability only exists on Cisco 9000 Series Aggregation Services Routers ASR Route Switch Processor RSP-4G and RSP-8G, Route Switch Processor 440 RSP440, and Cisco...

Information Leakage Using IPv6 Routing Header in Cisco IOS XR (cisco-sa-20070808-IOS-IPv6-leak)

Cisco IOS XR contains a vulnerability when processing specially crafted IPv6 packets with a Type 0 Routing Header present. Exploitation of this vulnerability leads to information leakage on affected IOS and IOS XR devices, and can also result in a crash of the affected IOS device. Successful...

Cisco IOS XR Software Malformed Border Gateway Protocol Attribute Vulnerability (cisco-sa-20120926-bgp)

Cisco IOS XR Software contains a vulnerability in the Border Gateway Protocol BGP routing protocol feature. The vulnerability can be triggered when the router receives a malformed attribute from a peer on an existing BGP session. Successful exploitation of this vulnerability can cause all BGP...

Code injection

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service memory consumption via TFTP 1 client or 2 server traffic, aka Bug IDs CSCuh09324 and CSCty42686...

Memory corruption

The IP Device Tracking IPDT feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service IPDT AVL corruption and device reload via a crafted sequence of ARP packets, aka Bug ID CSCuh38133...

PT-2013-6091

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in IPDT AVL corruption and device reload, via a crafted sequence of ARP packets. Recommendations At the...

CVE-2013-6705: Improper Input Validation

The IP Device Tracking IPDT feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service IPDT AVL corruption and device reload via a crafted sequence of ARP packets, aka Bug ID CSCuh38133...