Sql injection

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via malformed ICMP error packets associated with a 1 TCP or 2 UDP session that is under inspection by the Zone-Based Firewall ZBFW component, aka Bug ID...

Design/Logic Flaw

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending many PPTP packets over NAT, aka Bug ID CSCuh19936...

CVE-2013-5543

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via malformed ICMP error packets associated with a 1 TCP or 2 UDP session that is under inspection by the Zone-Based Firewall ZBFW component, aka Bug ID...

CVE-2013-5546

The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via large TCP packets that are processed by the 1 NAT or 2 ALG component, aka Bug ID CSCud72509...

CVE-2013-5545

Cisco IOS XE PPTP ALG vulnerability (CVE-2013-5545) affects 1000-series ASR devices running 3.9 before 3.9.2S. The issue—described as a PPTP ALG handling flaw—allows unauthenticated, remote attackers to trigger a reload of ESP/RP and cause a DoS by sending many PPTP packets over NAT. Connected do...

CVE-2013-5547: Improper Input Validation

Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending malformed EoGRE packets over 1 IPv4 or 2 IPv6, aka Bug ID CSCuf08269...

CVE-2013-5545: Improper Input Validation

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending many PPTP packets over NAT, aka Bug ID CSCuh19936...

CVE-2013-5543: Improper Input Validation

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via malformed ICMP error packets associated with a 1 TCP or 2 UDP session that is under inspection by the Zone-Based Firewall ZBFW component, aka Bug ID...

CVE-2013-5546: Improper Input Validation

The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via large TCP packets that are processed by the 1 NAT or 2 ALG component, aka Bug ID CSCud72509...

PT-2013-5629

Name of the Vulnerable Software and Affected Versions Cisco IOS affected versions not specified Description The issue allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic when AES-GCM or AES-GMAC is used. This occurs due to improper coding of the logic...

PT-2013-5628

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.9 through 3.9.2S Description The issue allows remote attackers to cause a denial of service by sending malformed EoGRE packets over IPv4 or IPv6. Successful exploitation could trigger a reload of the embedded services...

PT-2013-5624

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.4 through 3.4.2S Cisco IOS XE versions 3.5 through 3.5.1S Description The issue allows remote attackers to cause a denial of service via malformed ICMP error packets associated with a TCP or UDP session under inspection...

PT-2013-5626

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.9 through 3.9.2S Description The issue allows remote attackers to cause a denial of service by sending many PPTP packets over NAT. Successful exploitation could trigger a reload of the embedded services processors card ...

PT-2013-5627

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.7 before 3.7.3S Cisco IOS XE versions 3.8 before 3.8.1S Description The issue allows remote attackers to cause a denial of service via large TCP packets processed by the NAT or ALG component. Successful exploitation cou...

Design/Logic Flaw

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286...

Code injection

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service transmission outage via 1 IPv4 or 2 IPv6 traffic, aka Bug ID CSCuh30380...

CVE-2013-5549: Undefined Security Weakness

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service transmission outage via 1 IPv4 or 2 IPv6 traffic, aka Bug ID CSCuh30380...

CVE-2013-5522: Undefined Security Weakness

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286...

PT-2013-5603

Name of the Vulnerable Software and Affected Versions Cisco IOS on Catalyst 3750X switches affected versions not specified Description A vulnerability exists due to default Service Module credentials, allowing local users to gain privileges via a Service Module login. This issue makes it easier f...

PT-2013-5630

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.8.1 through 4.2.0 Cisco IOS XR Software Releases 3.3.0 to 4.2.0 Description The issue is related to the improper processing of fragmented packets within certain route-processor components, which can cause a denial of...