CVE-2017-6678: Improper Handling of Exceptional Conditions

A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function CF instances on an affected system to reload, resulting in a...

Hehdirb

Выложил недавно поделие для пайплайн-дирбастинга. Ссылка: В силу криворукости правильно обрабатываю не все эксепшны и не очень правильно работаю с gevent, но в таком виде на многих хостах тоже выжимает сильно больше, чем обычный dirbuster. Тулза может сама бинарным поиском определить максимальное...

Memory Corruption Vulnerability in Packet Processing by Kolai Packet Player

Kelai Packet Player is a packet playback tool provided by Kelai Network Analysis System, which can play back the packet file and the original packet file from Kelai Network Analysis System to reproduce the communication of the network. A memory corruption vulnerability exists in the packet...

PT-2017-16123

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint CE Software versions CE8.1.1 through CE8.3.1 Description A vulnerability in the ICMP ingress packet processing could allow an unauthenticated, remote attacker to cause the TelePresence endpoint to relo...

JVN#86171513: SEIL Series routers vulnerable to denial-of-service (DoS)

The DNS forwarder, the PPP Access Concentrator L2TP and the MeasureiPerf server function in SEIL Series routers provided by Internet Initiative Japan Inc. contain a denial-of-service DoS vulnerability due to a flaw in processing certain packets. Impact Receiving a specially crafted packet may...

Design/Logic Flaw

A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases...

CVE-2017-6603

A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases...

CVE-2017-6603

A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases...

CVE-2017-6603: Undefined Security Weakness

A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases...

PT-2017-17177

Name of the Vulnerable Software and Affected Versions Cisco ASR 903 or ASR 920 Series Devices versions prior to 15.62SP Description A denial of service DoS condition can be caused on a targeted system due to incorrect IPv6 Packet Processing. This issue can be exploited by an unauthenticated,...

PT-2017-9997

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 8.2.121.0 through 8.3.102.0 Description A vulnerability in IPv6 UDP ingress packet processing could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The issue is...

CVE-2014-3223

CVE-2014-3223 affects Huawei S9300 (pre-V100R006SPH013) and S2300/S3300/S5300/S6300 (pre-V100R006SPH010) switches, due to a Y.1731 processing flaw that can cause a reboot. The issue is tied to Huawei’s Y.1731 vulnerability (HWPSIRT-2013-1165) and is documented across multiple sources (NVD, CVE li...

Design/Logic Flaw

An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server CMS, formerly Acano Conferencing Server, could allow an authenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. In addition, the...

CVE-2017-3837

CVE-2017-3837 affects Cisco Meeting Server (CMS), formerly Acano Conferencing Server. A vulnerability in the Web Bridge HTTP packet processing allows an authenticated, remote attacker with a valid Web Bridge session to retrieve memory contents, potentially leaking confidential data, and may cause...

Cisco Meeting Server HTTP Packet Processing Vulnerability

A vulnerability in the Web Bridge interface of the Cisco Meeting Server CMS, formerly Acano Conferencing Server, could allow an authenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. In addition, the attacker could potentially...

Denial of service

A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points APs could allow an unauthenticated, adjacent attacker to cause the connection table to be full of invalid connections and be unable to process new incoming requests. Mor...

CVE-2016-9220

A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points APs could allow an unauthenticated, adjacent attacker to cause the connection table to be full of invalid connections and be unable to process new incoming requests. Mor...

CVE-2017-3804

A vulnerability in Intermediate System-to-Intermediate System IS-IS protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath domain crash because o...

CVE-2016-9220

A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points APs could allow an unauthenticated, adjacent attacker to cause the connection table to be full of invalid connections and be unable to process new incoming requests. Mor...

CVE-2016-9220: Undefined Security Weakness

A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points APs could allow an unauthenticated, adjacent attacker to cause the connection table to be full of invalid connections and be unable to process new incoming requests. Mor...