73 matches found
CVE-2021-1370
CVE-2021-1370 affects Cisco IOS XR Software on Cisco 8000 Series Routers and NCS540L software images. A vulnerability in a CLI command allows an authenticated, local attacker to escalate privileges to root due to insufficient validation of command line arguments. Exploitation requires a valid acc...
CVE-2021-1136 Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities
Multiple vulnerabilities in Cisco Network Convergence System NCS 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on...
Multiple Cisco Products Data Forgery Issue Vulnerabilities
The Cisco 8000 Series Router and the Cisco Network Convergence System 540 Series Routers are both router devices from Cisco USA. A data forgery issue vulnerability exists in Cisco IOS XR on multiple Cisco routers. The vulnerability is caused due to an unlocked version of the GRUB bootloader on th...
Multiple Cisco Products Data Forgery Issue Vulnerabilities
The Cisco 8000 Series Router and the Cisco Network Convergence System 540 Series Routers are both router devices from Cisco USA. A data forgery vulnerability exists in Cisco IOS XR on multiple Cisco routers. The vulnerability is due to an unsigned script in the ISO that is verified without...
Cisco Network Convergence System 1000 Series IOS XR Software Information Disclosure Vulnerability
Cisco Network Convergence System 1000 Series is a set of network convergence system of the United States Cisco Cisco. An information disclosure vulnerability exists in the IOS XR Software prior to version 6.5.2 in the Cisco Network Convergence System 1000 Series, which stems from the program's...
CVE-2019-1681
A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...
CVE-2019-1681
A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...
Information disclosure
A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...
CVE-2019-1681 Cisco Network Convergence System 1000 Series TFTP Directory Traversal Vulnerability
A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...
CVE-2019-1681
CVE-2019-1681 affects Cisco Network Convergence System 1000 Series IOS XR software. The root cause is improper validation of input in the TFTP service, enabling directory traversal to retrieve arbitrary files and cause information disclosure when the TFTP service is enabled. Affected releases are...
Cisco Network Convergence System 1000 Series TFTP Directory Traversal Vulnerability
A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...
PT-2019-1536 · Cisco · Cisco Network Convergence System 1000 Series
Name of the Vulnerable Software and Affected Versions: Cisco Network Convergence System 1000 Series software versions prior to Release 6.5.2 Description: A vulnerability in the TFTP service could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device,...
Design/Logic Flaw
A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition when the emsd service stops. The vulnerability is due to the software's inability to...
CVE-2017-12270
A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition when the emsd service stops. The vulnerability is due to the software's inability to...
CVE-2017-6666
A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series Routers could allow an authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic Engineering TE tunnels, resulting in a denial of servic...
CVE-2016-1366
The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service overwrite via unspecified vectors, aka Bug ID CSCuw75848...
CVE-2016-1366
CVE-2016-1366 affects Cisco IOS XR on Network Convergence System 6000 (versions 5.0.0–5.2.5). The SCP and SFTP modules expose a vulnerability due to insecure permissions on paths containing system files, allowing an authenticated, remote attacker to overwrite system files and cause a denial of se...
CVE-2016-1366
The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system files, which allows remote authenticated users to cause a denial of service overwrite via unspecified vectors, aka Bug ID CSCuw75848...
Cisco Network Convergence System 6000 IOS XR Denial of Service Vulnerability
Cisco IOS XR on Network Convergence System 6000 devices is the United States of America Cisco Cisco company's set of routing equipment running in the provision of special network functions in a fully modular, distributed network operating system. A security vulnerability exists in the telnetd...