CVE-2021-34725

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An...

Cisco IOS XE Software Resource Management Vulnerability

Cisco IOS XE Software is an operating system from the U.S. company Cisco Cisco. Used as a single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity.Cisco IOS XE Software has a denial of service vulnerability...

Cisco IOS XR information leakage vulnerability

Cisco IOS XR Software is a set of operating systems developed by Cisco for its network devices.Cisco IOS XR Software is vulnerable to information disclosure, which could be exploited by attackers to obtain sensitive configuration information...

Cisco IOS XE SD-WAN Command Execution Privilege Escalation

The vulnerability of the command-line interface CLI of Cisco IOS XE SD-WAN software exists because measures to neutralize specific elements have not been taken. Exploiting this vulnerability allows an attacker to execute arbitrary commands with superuser privileges...

Cisco IOS XE Privilege Escalation

The vulnerability in the Cisco IOS XE operating system’s web interface relates to incorrect restrictions on the path name of the restricted access directory. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level remotely...

Cisco IOS XE Data Compromise

The vulnerability of Cisco IOS XE operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

Cisco IOx command injection vulnerability

Cisco IOS XE is an open and flexible operating system optimized for future work. A command injection vulnerability exists in Cisco IOS XE versions after 16.3.1. The vulnerability is due to incomplete validation of fields in application packages loaded into IOx. An attacker can exploit the...

Cisco IOS XR DoS

The vulnerability of the enfbroker process in the Cisco IOS XR operating system’s incoming packet processing function is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Cisco IOS XR Grub Loader Code Execution

The vulnerability of the Grub loader in Cisco IOS XR routers from the Network Convergence System 540 Series and Cisco 8000 Series is related to errors in checking the cryptographic signature. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Cisco IOS XR security vulnerabilities

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. A vulnerability exists in the Cisco IOS XR software in the SNMP Management Panel with Access Control Error vulnerability. The vulnerability is due to incorrect LPTS programming when...

Snort intrusion detection system Security Bypass

The vulnerability of the Snort intrusion detection system, the microprogramming software for Cisco Firepower Threat Defense FTD, the program-defined network Cisco SD-WAN, the Cisco IOS XE network operating system, and the microprogramming software for Cisco Meraki devices is related to a flaw in...

Cisco IOS XE SNMP DoS

The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco IOS XE operating systems for Cisco Catalyst 9000 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service...

Cisco IOS XE RCE

The vulnerability of the Cisco IOS XE operating system’s web interface is related to the lack of authentication. Exploiting this vulnerability allows a remote attacker to increase their privileges and execute arbitrary code...

Cisco IOS DNS Split-Function DoS

The vulnerability of DNS split-function in Cisco IOS and Cisco IOS XE operating systems is related to insufficient processing of regular expressions. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Cisco IOS XE DoS

The vulnerability of the Cisco IOS XE network devices in the Cisco Catalyst 9000 series operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service interruptions...

Cisco IOS XE File System Override Access Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A security vulnerability exists in the file system permissions of Cisco IOS XE, which stems from insufficient file system permissions on the affected devices. An attacker could use this vulnerability t...

Cisco IOS and Cisco IOS XR Resource Management Error Vulnerability

Cisco IOS and Cisco IOS XR are both operating systems developed by Cisco for its network devices. A security vulnerability in DVMRP in Cisco IOS XR Software, which stems from insufficient queue management of Internet Group Management Protocol IGMP packets, could allow an attacker to send carefull...

TCL-script interpreter Code Execution Root Privileges

The vulnerability of the TCL-script interpreter for Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges on the base operating system...

Cisco IOS XE Security Group Tag Exchange Protocol DoS

The vulnerability of the Security Group Tag Exchange Protocol SXP implementation in Cisco IOS XE, Cisco IOS, and Cisco NX-OS is related to errors in processing SXP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco IOS IOx Privilege Escalation

The vulnerability of the IOx software platform of the Cisco IOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code or cause service failures...