203 matches found
CVE-2018-0160
A vulnerability in Simple Network Management Protocol SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper management of memory resources, referred to as a double free. An attacker...
CVE-2018-0175
Format String vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition or execute arbitrary code with elevated privileges o...
PT-2018-2794 · Cisco · Cisco Ios
Name of the Vulnerable Software and Affected Versions: Cisco IOS Software affected versions not specified Description: A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS Software could allow an authenticated, remote attacker to cause a denial of service DoS...
Hard-Coded Password in Cisco Software Lets Attackers Take Over Linux Servers
A medium yet critical vulnerability has been discovered in Cisco Prime Collaboration Provisioning software that could allow a local attacker to elevate privileges to root and take full control of a system. Cisco Prime Collaboration Provisioning PCP application allows administrators to remotely...
Information Disclosure Vulnerability in Multiple Cisco Products (CNVD-2017-33214)
Cisco IOS Software and so on are the products of the American Cisco Cisco company.Cisco IOS Software is a set of operating systems developed for the Cisco network equipment.DS 9222i Multiservice Modular Switch A switch device. An information disclosure vulnerability exists in the encryption...
CVE-2017-6665
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane ACP of an affected system and view ACP packets that are transferred in clear text within an affected system, a...
Cisco IOS XR Software Elevation of Privilege Vulnerability
Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A privilege-lifting vulnerability exists in the CLL in Cisco IOS XR Software, which stems from the program failing to...
CVE-2016-9205
A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash, resulting in a denial of service DoS condition. More Information: CSCvb14425. Known Affected Releases:...
CVE-2016-6380
The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service data corruption or device reload via a crafted DNS response, aka Bug ID CSCup90532...
Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2016-08389)
Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices.DNS Forwarder is one of the DNS forwarder components. A denial of service vulnerability exists in the DNS Forwarder feature in Cisco IOS and IOS XE Software. A remote attacker could exploit this...
CVE-2016-6414
iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223...
Cisco IOS ntp Subsystem Unauthorized Access Vulnerability (cisco-sa-20160419-ios)
A vulnerability in the ntp subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to mobilize ntp associations. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
PT-2016-1615 · Cisco · Cisco Ios +2
Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 15.1 through 15.2 Cisco NX-OS versions 4.1 through 6.2 Description: The Locator/ID Separation Protocol LISP implementation in Cisco IOS and NX-OS allows remote attackers to cause a denial of service device reload via a...
CVE-2013-3444
The CVE-2013-3444 entry corresponds to an authenticated command-injection vulnerability in multiple Cisco products when configured in central-management mode. Affected software includes Cisco WAAS (before 4.x and certain 5.x lines), Cisco ACNS, ECDS, CDS-IS, VDS-IS, VDS-SB, VDS-OE, and VDS-OS in ...
CVE-2013-1196
The CVE-2013-1196 entry involves multiple Cisco products (ACS, Identity Services Engine, ANM, LMS, Prime NSM/DCNM, Quad, etc.) where the command-line interface does not properly validate input, allowing local users to obtain root privileges via unspecified vectors. Connected documents corroborate...
Vulnerability in its Identity Services Engine of Cisco
Vulnerability in its Identity Services Engine of Cisco Cisco is warning users of a critical vulnerability CVE-2011-3290 in its Identity Services Engine ISE. In its security advisory, the company says that the underlying database used by ISE, its identity and access control policy platform, contai...
Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities
...
Week in Security: Scarily Tenacious Rootkits, Stuxnet's Secrets and Cisco Flaws
The news this week revolved around complex and troublesome threats, notably two rootkits, TDL4 and ZeroAccess. Stuxnet reared its head once again as did a new problem with Cisco’s popular videoconferencing software. Read on for the full week in review. In our most popular story of the week, we...
