Cisco IOS XE EnergyWise DoS (cisco-sa-20170419-energywise)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by multiple buffer overflow conditions due to improper parsing of EnergyWise packets. An unauthenticated, remote attacker can exploit these, by sending specially crafted IPv4 EnergyWise...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2017-06096)

Cisco IOS and IOS XE are operating systems developed by Cisco for its network devices.EnergyWise is one of the energy management architecture modules. A denial of service vulnerability exists in the EnergyWise module of Cisco IOS and Cisco IOS XE, which arises from a program's failure to properly...

Buffer overflow

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...