Code injection

Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3C PFC3C is used, does not create a fragment entry during processing of an ICMPv6 ACL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtj90091...

Denial of service

Cisco IOS 15.2S allows remote attackers to cause a denial of service interface queue wedge via malformed UDP traffic on port 465, aka Bug ID CSCts48300...

Command injection

Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the "set mpls experimental imposition" command, which allows remote attackers to cause a denial of service device crash via network traffic that triggers 1 fragmentation or 2 reassembly, aka Bug ID CSCtr56576...

Design/Logic Flaw

The extended ACL functionality in Cisco IOS 12.258SE2 and 15.01SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106...

Design/Logic Flaw

The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service device crash via a malformed HTTP response to a request for service installation, aka Bug ID CSCts12249...

CVE-2012-0362

The extended ACL functionality in Cisco IOS 12.258SE2 and 15.01SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106...

CVE-2012-0338

Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH connections from arbitrary source IP addresses via a standard SSH client, aka Bug ID CSCsv86113...

CVE-2011-4016

CVE-2011-4016 affects Cisco IOS PPP implementation via PTA and L2TP. The vulnerability allows remote attackers to cause a device crash (DoS) by sending crafted network traffic on affected platforms: Cisco IOS 12.2 and 15.0–15.2. Root cause details specify issues in the PPP handling during PTA/L2T...

PT-2012-1781

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0, 15.0, and 15.1 Description The issue is related to the processing of an ICMPv6 ACL when a Policy Feature Card 3C PFC3C is used. It does not create a fragment entry, which has unspecified impact and can be exploited...

PT-2012-1683

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 and 15.0 through 15.2 Description The issue allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration. Recommendations For Cisco IOS versions 12.4 and...

PT-2012-2511

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 and 15.0 Description The issue allows remote attackers to establish TELNET connections from arbitrary source IP addresses via a standard TELNET client. This occurs because Cisco IOS does not recognize the...

PT-2012-1563

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2 Description A memory leak issue allows remote attackers to cause a denial of service by consuming memory via malformed SIP packets on a NAT interface. Recommendations For Cisco IOS versions 15.1 through 15....

CVE-2012-0339: Improper Input Validation

Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary source IP addresses via a standard TELNET client, aka Bug ID CSCsi77774...

CVE-2011-3295: Improper Input Validation

The NETIO and IPV4IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service CPU consumption via crafted network traffic, aka Bug ID CSCti59888...

PT-2012-1685

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.8 through 4.1 Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, via crafted network traffic. Recommendations For Cisco IOS XR versions 3.8 through 4.1, update to a...

CVE-2011-4015: Improper Input Validation

Cisco IOS 15.2S allows remote attackers to cause a denial of service interface queue wedge via malformed UDP traffic on port 465, aka Bug ID CSCts48300...

CVE-2011-4012: Undefined Security Weakness

Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3C PFC3C is used, does not create a fragment entry during processing of an ICMPv6 ACL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtj90091...

CVE-2011-4016: Improper Input Validation

The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2, when Point-to-Point Termination and Aggregation PTA and L2TP are used, allows remote attackers to cause a denial of service device crash via crafted network traffic, aka Bug ID CSCtf71673...

CVE-2011-4007: Improper Input Validation

Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the "set mpls experimental imposition" command, which allows remote attackers to cause a denial of service device crash via network traffic that triggers 1 fragmentation or 2 reassembly, aka Bug ID CSCtr56576...

CVE-2012-0338: Improper Input Validation

Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH connections from arbitrary source IP addresses via a standard SSH client, aka Bug ID CSCsv86113...