PT-2012-1010

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 Cisco IOS versions 15.0 through 15.2 Cisco IOS XE versions 2.1.x through 2.6.x Cisco IOS XE versions 3.1.xS through 3.4.xS before 3.4.2S Cisco IOS XE versions 3.5.xS before 3.5.1S Cisco IOS XE versions...

PT-2012-2535

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 through 15.2 Description A memory leak in the H.323 inspection feature of the Zone-Based Firewall in Cisco IOS allows remote attackers to cause a denial of service via malformed transit H.323 traffic. This issue is part...

PT-2012-1007

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 through 15.1 Description The issue is related to a memory leak in the Network Address Translation NAT feature, allowing remote attackers to cause a denial of service memory consumption, and device hang or reload via SIP...

PT-2012-3188

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 through 15.2 Description The issue is related to a memory leak in the SIP inspection feature in the Zone-Based Firewall, allowing remote attackers to cause a denial of service via crafted transit SIP traffic. This is on...

PT-2012-1006

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 12.4, 15.0, 15.1, and 15.2 Cisco IOS XE versions 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S Description The Secure Shell SSH server implementation in Cisco IOS Software and Cisco IOS XE Software contai...

PT-2012-1005

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 and 15.1 Cisco IOS XE versions 3.2.xS through 3.4.xS before 3.4.2S Description The vulnerability in the RSVP feature of Cisco IOS and IOS XE Software, when used on a device configured with VPN routing and forwarding VRF...

PT-2012-1008

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0, 12.2 through 12.4, and 15.0 through 15.2 Cisco IOS XE versions 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.1S Cisco IOS XE versions 3.1.xSG and 3.2.xSG before 3.2.2SG Description The Multicast Source...

PT-2012-2533

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0, 15.1, and 15.2 Description The issue allows remote attackers to cause a denial of service by sending a malformed message over TCP. This occurs when an affected device processes the malformed message on TCP port...

PT-2012-1009

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 Cisco IOS versions 15.0 through 15.2 Cisco IOS XE versions 2.1.x through 2.6.x Cisco IOS XE versions 3.1.xS before 3.1.2S Cisco IOS XE versions 3.2.xS through 3.4.xS before 3.4.2S Cisco IOS XE versions 3.5....

Cisco IOS Line Printer Daemon (LPD) Stack Overflow

On October 10 2007, Cisco released a security response for a vulnerability in the Line Printer Daemon LPD in IOS. Exploitation of this vulnerability could result in arbitrary code execution. This plugin checks if the appropriate fix for the advisory has been installed. TRUSTED...

DOCSIS Read-Write Community String Enabled in Non-DOCSIS Platforms

Vulnerable versions of Cisco IOS contain a default hard-coded community string when SNMP is enabled on the device. An additional read-write community string may be enabled if the device is configured for SNMP management, which would allow privilege access to the device. TRUSTED...

Cisco IOS SSL VPN Vulnerability (cisco-sa-20100922-sslvpn)

Cisco IOS Software contains a vulnerability when the Cisco IOS SSL VPN feature is configured with an HTTP redirect. Exploitation could allow a remote, unauthenticated user to cause a memory leak on the affected devices, that could result in a memory exhaustion condition that may cause device...

Cisco IOS Portscan Remote Denial of Service

It is possible to cause a denial of service by scanning all ports on the host or scanning a network of hosts for a single open port through the device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17774; scriptversion"1.7"; scriptcvsdate"Date: 2018/11/15 20:50:20";...

Cisco VLAN Trunking Protocol Vulnerability (cisco-sr-20081105-vtp)

The VTP protocol implementation in Cisco IOS is potentially vulnerable to a denial of service attack via a specially crafted VTP packet sent from the local network segment when operating in either server or client VTP mode. When the device receives the specially crafted VTP packet, the switch may...

Cisco IOS Command EXEC Unspecified Vulnerability

An unspecified vulnerability in Command EXEC allows local users to bypass command restrictions and obtain sensitive information via an unspecified 'variation of an IOS command'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17775; scriptversion"1.5";...

Cisco IOS ICMP Redirect Denial of Service

It is possible to cause a denial of service by flooding the remote device with ICMP requests, which will cause the redirect cache to grow. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17794; scriptversion"1.8"; scriptcvsdate"Date: 2018/11/15 20:50:20";...

Cisco IOS GRE Decapsulation Vulnerability

The remote device contains a flaw in the way GRE packets are handled. By sending a specially crafted GRE packet, an attacker can take advantage of this flaw to potentially bypass access-control lists. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17789;...

Cisco IOS Software Overly Long GET Request Causes Buffer Overflow in HTTP Server

The Cisco IOS HTTP server allows for a malformed HTTP request that contains two gigabytes of data. This could cause the router to reload with a buffer overflow condition. It may be exploited to execute arbitrary code on the router. Note that the HTTP server must be enabled in order to exploit thi...

Cisco IOS Hot Standby Routing Protocol Crafted UDP Packets Denial of Service

When Hot Standby Routing Protocol HSRP is not enabled, it is possible to cause a denial of service via randomly sized UDP packets to the HSRP port 1985. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17772; scriptversion"1.7"; scriptcvsdate"Date: 2018/11/15 20:50:20"...

CVE-2011-0941

Memory leak in Cisco Unified Communications Manager CUCM 6.x before 6.15su2, 7.x before 7.15bsu3, 8.x before 8.03asu1, and 8.5 before 8.51, and Cisco IOS 12.4 and 15.1, allows remote attackers to cause a denial of service memory consumption and process failure or device reload via a malformed SIP...