Cisco IOS Software and IOx Software Information Disclosure Vulnerability

Cisco IOS is an operating system developed by Cisco for its network devices. An information disclosure vulnerability exists in Cisco IOS Software and IOx Software. An attacker could exploit this vulnerability to obtain sensitive information and launch further attacks...

Cisco IOS Software for Cisco Catalyst 6500 Series Switches and 7600 Series Routers ACL Bypass Vulnerability (cisco-sa-20161005-catalyst)

A vulnerability in the ternary content addressable memory TCAM share access control list ACL functionality of Cisco IOS Software running on Supervisor Engine 720 and Supervisor Engine 32 Modules for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers could allow an unauthenticated,...

Cisco IOS Software DNS Forwarder Denial of Service Vulnerability (cisco-sa-20160928-dns)

A vulnerability in the DNS forwarder functionality of Cisco IOS could allow an unauthenticated, remote attacker to cause the device to reload, corrupt the information present in the device SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced source...

Cisco IOS Software Smart Install Memory Leak Vulnerability (cisco-sa-20160928-smi)

The Smart Install client feature in Cisco IOS Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a memory leak and eventual denial of service DoS condition on an affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...

Cisco IOS Software Internet Key Exchange Version 1 Fragmentation Denial of Service Vulnerability (cisco-sa-20160928-ios-ikev1)

A vulnerability in the Internet Key Exchange version 1 IKEv1 fragmentation code of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an exhaustion of available memory or a reload of the affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions mig...

Cisco IOS Software H.323 Message Validation Denial of Service Vulnerability (cisco-sa-20160928-h323)

A vulnerability in the H.323 subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition on an affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Cisco IOS Software IKEv1 Information Disclosure Vulnerability (cisco-sa-20160916-ikev1)

A vulnerability in Internet Key Exchange version 1 IKEv1 packet processing code in Cisco IOS Software could allow an unauthenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. SPDX-FileCopyrightText: 2016 Greenbone AG Some text...

Cisco IOS Software IOx Local Manager Cross-Site Scripting Vulnerability (cisco-sa-20160914-ios)

A vulnerability in the web framework code of the Cisco Local Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...

Cisco IOS Software RSVP Vulnerability

A vulnerability in the implementation of the Resource Reservation Protocol RSVP in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker cause the device to reload. This vulnerability could be exploited repeatedly to cause an extended denial of service DoS...

Cisco IOS Software Internet Key Exchange Version 2 Denial of Service Vulnerability (cisco-sa-20140326-ikev2)

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a reload of the affected device that would lead to a denial of service DoS condition. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...

Cisco IOS Software SSL VPN Denial of Service Vulnerability (cisco-sa-20140326-ios-sslvpn)

A vulnerability in the Secure Sockets Layer SSL VPN subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Cisco IOS Software Tunnel Interfaces Security Bypass Vulnerability (cisco-sa-20151112-ios2)

A vulnerability in Cisco devices running IOS Software configured with access control lists ACLs could allow an unauthenticated, remote user connected to a tunnel interface to bypass configured ACLs on tunnel interfaces if the ACL on the physical interface permits the traffic to pass...

Cisco Catalyst Switches IOS Software Information Disclosure Vulnerability

Cisco Catalyst Switches running Cisco IOS Software is a switch product from Cisco that runs the Cisco IOS operating system. An information disclosure vulnerability exists in Cisco Catalyst Switches running Cisco IOS Software versions prior to 15.22E1 due to a failure of the program to properly...

Cisco Catalyst Switches Network Mobility Services Protocol Port Information Disclosure Vulnerability

Cisco Catalyst Switches running Cisco IOS Software releases prior to 15.22E1 may allow an unauthenticated, remote attacker to retrieve version information about the software release running on the device by accessing the Network Mobility Services Protocol NMSP port. The vulnerability is due to a...

Cisco IOS Software Virtual PPP Interfaces Security Bypass Vulnerability

A vulnerability in Cisco devices that are running Cisco IOS Software Release 15.204M or Cisco IOS Software Release 15.403M and are configured to use access control lists ACLs could allow a user who is connected to an authenticated PPP session to bypass ACLs that are configured on virtual PPP...

Cisco IOS Software Tunnel Interfaces Security Bypass Vulnerability

A vulnerability in Cisco devices running IOS Software versions 15.204M6 and 15.403S configured with access control lists ACLs could allow an unauthenticated, remote user connected to a tunnel interface to bypass configured ACLs on tunnel interfaces if the ACL on the physical interface permits the...

Cisco Catalyst 4500 SNMP Polling Denial of Service Vulnerability (Cisco-SA-20150402-CVE-2015-0687)

A vulnerability in the Simple Network Management Protocol SNMP code of Cisco Catalyst 4500 devices running Cisco IOS Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpt...

Cisco IOS Software TCL Script Interpreter Privilege Escalation Vulnerability

A vulnerability in the Tool Command Language TCL script interpreter of Cisco IOS Software could allow an authenticated, local attacker to escalate privileges from those of a non-privileged user to a privileged level 15 user. This would allow a non-privileged user to execute privileged commands...

Cisco Releases Semiannual IOS Software Security Advisory Bundled Publication

Cisco has released its semiannual Cisco IOS Software Security Advisory Bundled Publication. This publication includes seven Security Advisories that address vulnerabilities in Cisco IOS Software. Exploits of these vulnerabilities could result in a denial of service DoS condition, interface queue...

Cisco IOS Software Authentication Proxy Bypass Vulnerability

A vulnerability in the Authentication Proxy feature of Cisco IOS Software could allow a remote attacker to bypass the authentication. The vulnerability is due to the incorrect processing of unsupported Authentication, Authorization, and Accounting AAA return codes from the AAA feature by the...