CVE-2018-15375: Write-what-where Condition

A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The vulnerability is due to the...

PT-2018-13004

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers affected versions not specified Description A vulnerability in the embedded test subsystem could allow an authenticated, local attacker to write arbitrary values to...

PT-2018-8851

Name of the Vulnerable Software and Affected Versions Cisco Second Generation Integrated Services Routers ISR G2 affected versions not specified Cisco 4451-X Integrated Services Router ISR4451-X affected versions not specified Description A vulnerability in the SM-1T3/E3 firmware could allow an...

PT-2018-13005

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers affected versions not specified Description A vulnerability in the embedded test subsystem could allow an authenticated, local attacker to write arbitrary values to...

Cisco IOS Software Integrated Services Module for VPN crypto engine denial of service vulnerability

Cisco IOS Software is an operating system developed by Cisco for its network devices.Integrated Services Module for VPN ISM-VPN is one of the integrated services modules for VPN. crypto engine is one of the encryption engines. A resource management error vulnerability exists in the crypto engine...

CVE-2018-0154

A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN ISM-VPN running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient handling of VPN traffi...

CVE-2018-0154: Undefined Security Weakness

A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN ISM-VPN running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient handling of VPN traffi...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC/US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...

PT-2018-1190

Name of the Vulnerable Software and Affected Versions Cisco Integrated Services Module for VPN ISM-VPN versions affected versions not specified Description A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN ISM-VPN running Cisco IOS Software could allow an...

CVE-2017-12232

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 ISR G2 Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...

Cisco Integrated Services Routers Generation 2 Denial of Service Vulnerability

Cisco Integrated Services Routers Generation 2 ISR G2 Routers is a router device from Cisco.IOS is one of the operating systems used for network devices. A denial of service vulnerability exists in the protocol implementation of IOS versions 15.0 through 15.6 in Cisco Integrated Services Routers...

CVE-2017-12232: Undefined Security Weakness

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 ISR G2 Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...

Cisco IOS Software for Cisco Integrated Services Routers Generation 2 Denial of Service Vulnerability

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 ISR G2 Routers running Cisco IOS Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilit...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...

PT-2017-4196 · Cisco · Cisco Integrated Services Routers Generation 2 (Isr G2) Routers +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 15.0 through 15.6 Description: A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 ISR G2 Routers could allow an unauthenticated, adjacent attacker to cause an affected devi...

Design/Logic Flaw

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...

CVE-2017-12223

Cisco IR800 Integrated Services Router Software ROMMON has an input validation vulnerability in ROMMON code that could let an unauthenticated, local attacker boot an unsigned Hypervisor via console access, modify ROMMON variables, and execute arbitrary code to install malicious Hypervisor firmwar...

CVE-2017-12223

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...

PT-2017-12414

Name of the Vulnerable Software and Affected Versions Cisco IR800 Integrated Services Router Software affected versions not specified Description A vulnerability in the ROM Monitor ROMMON code could allow an unauthenticated, local attacker to compromise the integrity of the system by booting an...

CVE-2017-12223: Improper Input Validation

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...