Lucene search
+L

4719 matches found

Vulnrichment
Vulnrichment
•added 2024/03/27 4:57 p.m.•32 views

CVE-2024-20314

A vulnerability in the IPv4 Software-Defined Access SD-Access fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and stop all traffic processing, resulting in a denial of service DoS condition on an affected device. This...

8.6CVSS7.1AI score0.00803EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 4:50 p.m.•96 views

CVE-2024-20311

Cisco IOS and IOS XE Software are affected by a LISP processing vulnerability (CVE-2024-20311) that can be exploited remotely by sending a crafted LISP packet, causing an unauthenticated device to reload and suffer DoS. The issue stems from incorrect handling of LISP packets in the Locator ID Sep...

8.6CVSS7.1AI score0.00803EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/27 4:50 p.m.•40 views

CVE-2024-20311

A vulnerability in the Locator ID Separation Protocol LISP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to the incorrect handling of LISP packets. An attacker could exploit...

8.6CVSS8.6AI score0.00803EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/27 4:50 p.m.•17 views

CVE-2024-20311

A vulnerability in the Locator ID Separation Protocol LISP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to the incorrect handling of LISP packets. An attacker could exploit...

8.6CVSS7.1AI score0.00803EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 4:49 p.m.•137 views

CVE-2024-20316

CVE-2024-20316 affects Cisco IOS XE Software with the Data Model Interface (DMI) when an IPv4 ACL is updated via NETCONF/RESTCONF. The issue stems from improper error handling that can reorder ACEs in an updated ACL, potentially allowing access to resources that should be protected. Concrete deta...

5.8CVSS7AI score0.00451EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/27 4:49 p.m.•46 views

CVE-2024-20316

A vulnerability in the data model interface DMI services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list ACL. This vulnerability is due to improper handling of error conditions wh...

5.8CVSS6.1AI score0.00451EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/03/27 4:00 p.m.•80 views

Cisco IOS and IOS XE Software Locator ID Separation Protocol Denial of Service Vulnerability

A vulnerability in the Locator ID Separation Protocol LISP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to the incorrect handling of LISP packets. An attacker could exploit...

8.6CVSS8.5AI score0.00803EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/03/27 4:00 p.m.•43 views

Cisco IOS XE Software NETCONF/RESTCONF IPv4 Access Control List Bypass Vulnerability

A vulnerability in the data model interface DMI services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list ACL. This vulnerability is due to improper handling of error conditions wh...

5.8CVSS5.8AI score0.00451EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/03/27 4:00 p.m.•50 views

Cisco Access Point Software Denial of Service Vulnerability

A vulnerability in the IP packet processing of Cisco Access Point AP Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could...

8.6CVSS8.5AI score0.00633EPSS
SaveExploits0References1
Fedora
Fedora
•added 2024/03/27 12:15 a.m.•45 views

[SECURITY] Fedora 40 Update: netavark-1.10.3-3.fc40

OCI network stack Netavark is a rust based network stack for containers. It is being designed to work with Podman but is also applicable for other OCI container management applications. Netavark is a tool for configuring networking for Linux containers. Its features include: Configuration of...

8.6CVSS8.7AI score0.0049EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•10 views

PT-2024-2417 · Cisco · Cisco Aironet Access Points +2

Name of the Vulnerable Software and Affected Versions: Cisco Access Point AP Software affected versions not specified Cisco Aironet Access Points AP affected versions not specified Cisco Wireless LAN Controller WLC affected versions not specified Description: A vulnerability in the IP packet...

8.6CVSS7.4AI score0.00633EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•9 views

PT-2024-2418

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the DHCP snooping feature could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service...

8.6CVSS5.8AI score0.00816EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•7 views

CVE-2024-20259: Heap-based Buffer Overflow

A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to a crafted IPv4 DHCP request packet being mishandle...

8.6CVSS5.8AI score0.00816EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•6 views

CVE-2024-20314: Operator Precedence Logic Error

A vulnerability in the IPv4 Software-Defined Access SD-Access fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and stop all traffic processing, resulting in a denial of service DoS condition on an affected device. This...

8.6CVSS5.9AI score0.00803EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•6 views

CVE-2024-20271: Improper Input Validation

A vulnerability in the IP packet processing of Cisco Access Point AP Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could...

8.6CVSS5.8AI score0.00633EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•27 views

PT-2024-2551

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description The issue is related to improper handling of error conditions in the Data Model Interface DMI services of Cisco IOS XE Software when a device administrator updates an IPv4 acces...

5.8CVSS6.3AI score0.00451EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•6 views

CVE-2024-20316: Detection of Error Condition Without Action

A vulnerability in the data model interface DMI services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list ACL. This vulnerability is due to improper handling of error conditions wh...

5.8CVSS5.9AI score0.00451EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/03/27 12:00 a.m.•133 views

Cisco IOS XE Software SD Access Fabric Edge Node DoS (cisco-sa-ios-xe-sda-edge-dos-qZWuWXWG)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the IPv4 Software-Defined Access SD-Access fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and stop al...

8.6CVSS5.6AI score0.00803EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2024/03/27 12:00 a.m.•45 views

Fedora: Security Advisory for netavark (FEDORA-2024-a267e93f8c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS9AI score0.0049EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/25 12:00 a.m.•19 views

Fedora: Security Advisory (FEDORA-2024-e34efa1300)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References4
Rows per page
Query Builder