Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2017-06096)

Cisco IOS and IOS XE are operating systems developed by Cisco for its network devices.EnergyWise is one of the energy management architecture modules. A denial of service vulnerability exists in the EnergyWise module of Cisco IOS and Cisco IOS XE, which arises from a program's failure to properly...

The vulnerability of the Cisco IOS operating system, allowing a perpetrator to execute arbitrary commands

The vulnerability in the Cisco IOS operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary commands with superuser privileges...

The vulnerability of the Cisco IOS operating system allows a perpetrator to trigger an emergency failure in the event management service.

The vulnerability of the Google service for triggering remote operating system procedures in Cisco IOS is related to a system memory leak. Exploiting this vulnerability could allow an attacker to cause a failure in the event management service...

Cisco IOS XE Software for Cisco ASR 920 Series Routers Denial of Service Vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in Cisco IOS XE Software. An attacker could exploit this vulnerability to cause a reload of an affected device, resulting in a denial of service...

CVE-2017-3858

A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of HTTP parameters supplied by the user. An attacker could...

Cisco IOS and IOS XE Software ANI Registration Function Denial of Service Vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco in the United States for its network devices. The Autonomic Networking Infrastructure ANI registration feature in Cisco IOS and IOS XE Software fails to adequately filter packets. A remote attacker could exploit the...

Cisco IOS and IOS XE Software ANI IPv6 Message Denial of Service Vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco in the United States for its network devices. The Autonomic Networking Infrastructure ANI feature in Cisco IOS and IOS XE Software fails to adequately filter packets. A remote attacker could exploit the vulnerability by...

CVE-2017-3849

A vulnerability in the Autonomic Networking Infrastructure ANI registrar feature of Cisco IOS Software possibly 15.2 through 15.6 and Cisco IOS XE Software possibly 3.7 through 3.18, and 16 could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The...

VulnCheck KEV: CVE-2017-3881

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges...

CVE-2016-6473

A vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network storm. More Information: CSCuu69332, CSCux07028. Known Affected Releases: 15.23E. Known Fixed Releases: 12.250SE4 12.250SE5 12.250SQ5...

Cisco IOS and IOS XE Software Security Bypass Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in Cisco IOS and Cisco IOS XE Software's ZONE-based firewall allows a remote attacker to exploit the vulnerability to submit a special request for policy los...

Cisco IOS Frame Forwarding Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in Cisco IOS on Catalysts Switches and Nexus 9300 switches allows a remote attacker to exploit the vulnerability to submit a special request for a denial of...

Cisco IOS and IOS XE Software Authentication Bypass Vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. An authentication bypass vulnerability exists in Cisco IOS and IOS XE Software. An attacker could use this vulnerability to bypass the authentication mechanism and gain unauthorized access,...

CVE-2016-6423

The IKEv2 client and initiator implementations in Cisco IOS 15.53M and IOS XE allow remote IKEv2 servers to cause a denial of service device reload via crafted IKEv2 packets, aka Bug ID CSCux97540...

CVE-2016-6391

Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service traffic-processing outage via a crafted series of Common Industrial Protocol CIP requests, aka Bug ID CSCur69036...

CVE-2016-6385

Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service memory consumption via crafted image-list parameters, aka Bug ID CSCuy82367...

CVE-2016-6379

Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service device reload via crafted IP Detail Record IPDR packets, aka Bug ID CSCuu35089...

CVE-2016-6392

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service device restart via a crafted IPv4 Multicast Source Discovery Protocol MSDP Source-Active SA message, aka Bug ID CSCud36767...

CVE-2016-6386

Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service data-structure corruption and device reload via fragmented IPv4 packets, aka Bug ID CSCux66005...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2016-08394)

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices.Authentication, Authorization and Accounting AAA is one of these modules that is used to process requests for computer resources and users and provide authentication, authorization, and authorizati...