Code injection

The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...

CVE-2013-1121

The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...

CVE-2013-1121

The CVE-2013-1121 issue affects Cisco NX-OS BGP: the regex engine handling complex inbound route expressions can be triggered by crafted AS path sets, causing a remote, unauthenticated attacker to reload the device (DoS). Public sources (Cisco advisory) confirm the vulnerability and that software...

CVE-2013-1121: Undefined Security Weakness

The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service device reload via a crafted AS path set, aka Bug ID CSCuf49554...

Cisco NX-OS Software BGP Regex Vulnerability

A vulnerability in the Border Gateway Protocol BGP code of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to an issue with the regex engine used when processing complex regular expressions. An attacker could...

PT-2013-2893

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue is related to the regex engine in the BGP implementation, which can cause a denial of service device reload when a complex regular expression is configured for inbound routes. A...

CVE-2013-5496

Open Network Environment Platform ONEP in Cisco NX-OS allows remote authenticated users to cause a denial of service network-element reload via a crafted packet, aka Bug ID CSCui51551...

CVE-2013-5496

Open Network Environment Platform ONEP in Cisco NX-OS allows remote authenticated users to cause a denial of service network-element reload via a crafted packet, aka Bug ID CSCui51551...

CVE-2013-5496

CVE-2013-5496 affects Cisco NX-OS Open Network Environment Platform (ONEP). A vulnerability due to insufficient pointer validation allows an authenticated, remote attacker to cause a network element to reload (DoS) by sending crafted packets. The issue, tracked as CSCui51551, is documented in Cis...

CVE-2013-5496: Improper Input Validation

Open Network Environment Platform ONEP in Cisco NX-OS allows remote authenticated users to cause a denial of service network-element reload via a crafted packet, aka Bug ID CSCui51551...

PT-2013-5580

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows remote authenticated users to cause a denial of service, resulting in a network-element reload, by sending a crafted packet to an affected network element. This is due to...

OSPF LSA Manipulation Vulnerability in Cisco NX-OS (cisco-sa-20130801-lsaospf)

The remote Cisco NX-OS device is affected by a vulnerability involving the Open Shortest Path First OSPF routing protocol Link State Advertisement LSA database. By injecting specially crafted OSPF packets, an unauthenticated attacker could manipulate or disrupt the flow of network traffic through...

Cisco IOS / ASA / FWSM / NX-OS / StarOS OSPF protocol vulnerability

LSA packet routing table manipulation...

CVE-2013-0149

The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database,...

CVE-2013-3400

The license-installation module in Cisco NX-OS on Nexus 1000V devices allows local users to execute arbitrary commands via crafted "install license" arguments, aka Bug ID CSCuh30824...

Design/Logic Flaw

The license-installation module in Cisco NX-OS on Nexus 1000V devices allows local users to execute arbitrary commands via crafted "install license" arguments, aka Bug ID CSCuh30824...

CVE-2013-3400

Summary: CVE-2013-3400 affects Cisco Nexus 1000V NX-OS license-installation module. Vulnerable component: the license-installation command handling in Nexus 1000V. Root cause: failure to properly validate user-supplied input of install license arguments. Impact: authenticated, local attacker coul...

CVE-2013-3400

The license-installation module in Cisco NX-OS on Nexus 1000V devices allows local users to execute arbitrary commands via crafted "install license" arguments, aka Bug ID CSCuh30824...

CVE-2013-3400: Improper Input Validation

The license-installation module in Cisco NX-OS on Nexus 1000V devices allows local users to execute arbitrary commands via crafted "install license" arguments, aka Bug ID CSCuh30824...

PT-2013-4357

Name of the Vulnerable Software and Affected Versions Cisco NX-OS on Nexus 1000V devices affected versions not specified Description The issue allows local users to execute arbitrary commands via crafted arguments to the install license command. This is due to a failure to properly validate...