Multiple Cisco Products IOS XE Software Elevation of Privilege Vulnerability

Cisco 4000 Series Integrated Services Routers and others are different models of router products from Cisco USA. in which IOS XE Software is used. an operating system developed by Cisco for its network devices. An elevation of privilege vulnerability exists in the shell access request mechanism o...

CVE-2018-0418: Uncontrolled Resource Consumption

A vulnerability in the Local Packet Transport Services LPTS feature set of Cisco ASR 9000 Series Aggregation Services Router Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of input and...

PT-2018-1784

Name of the Vulnerable Software and Affected Versions Cisco ASR 9000 Series Aggregation Services Router Software affected versions not specified Description The issue is related to a lack of input validation for Precision Time Protocol PTP traffic. An unauthenticated, remote attacker could exploi...

Cisco IOS XE Privilege Escalation

The vulnerability of the Cisco IOS operating system’s web interface is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by using the VTY interface...

Cisco IOS Software and IOS XE Software Denial of Service Vulnerability (CNVD-2018-07302)

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the DHCP option 82 encapsulation feature in Cisco IOS Software and IOS XE Software, which arises from the program's failure to perform full inp...

networkmap Component Code Execution

The vulnerability of the “networkmap” component in ASUS’s microprogramming router software arises from buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by constructing long strings as values for the hostname and port in the response to a...

I-O Data Device WN-G300R3 Router Buffer Overflow

The vulnerability of the WN-G300R3 router’s microprogramming software is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link TRENDnet Router Firmware Command Execution Authentication Bypass

The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...

Cisco IOS LISP Authentication Bypass

The vulnerability of the Locator/ID Separation LISP protocol implementation in Cisco IOS is related to defects in the authentication process logical error. Exploiting this vulnerability allows a malicious actor to bypass the authentication process by using special registration requests that trigg...

Cisco IOS XE Software Command Execution Vulnerability

Cisco ASR 920 Series Aggregation Services Routers are Cisco's ASR 920 series of multifunction routers.Cisco IOS XE Software is one of the operating systems dedicated to network devices. An arbitrary command execution vulnerability exists in the USB-modem code of the IOS XE Software in the Cisco A...

CVE-2017-12223: Improper Input Validation

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...

PT-2017-12414

Name of the Vulnerable Software and Affected Versions Cisco IR800 Integrated Services Router Software affected versions not specified Description A vulnerability in the ROM Monitor ROMMON code could allow an unauthenticated, local attacker to compromise the integrity of the system by booting an...

Cisco IOS and IOS XE SNMP Remote Code Execution Vulnerability (CNVD-2017-12534)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. Cisco IOS and IOS XE SNMP Remote Code Execution Vulnerability. Allows remote attackers to cause an SNMP service buffer overflow by sending constructed SNMP packets, resulting in...

Huawei Flybox B660 - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Document Title: =============== Huawei Flybox B660 - POST SMS CSRF Web Vulnerability Product & Service Introduction: =============================== The Huawei B660 has a web interface for configuration. You can use any web browser you li...

Cisco IOS XR Software Default Account Password Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. Cisco IOS XR Software exists for accounts with default and static passwords, allowing a local attacker to exploit a vulnerability to log in with ROOT user privileges...

Cisco IOS Disconnection

Cisco IOS software contains a vulnerability in the DHCP service, which allows a remote attacker to cause a router to generate a “service failure” by manipulating DHCP packets...

CVE-2016-1350

Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service device reload via malformed SIP messages, aka Bug ID CSCuj23293...

P-660HW NBG-418N PMG5318 ZyNOS Privilege Escalation

The vulnerability of the P-660HW, NBG-418N, PMG5318 router microprogramming software and the ZyNOS operating system is related to the default use of a standard password for the administrator account. Exploiting this vulnerability can allow an attacker, operating remotely, to gain administrator...

Cisco IOS Software UBR Devices IPv6 VPN Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability in Cisco IOS Software UBR Devices IPv6 VPN Multiprotocol Label Switching allows remote attackers to quickly cause a denial of service by sending...

Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2015-03854)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in the IPv6 processing code of Cisco IOS XR Software allows an unauthenticated, remote attacker to exploit this vulnerability to cause a line card reload,...