Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability (cisco-sa-20120926-ecc)

The Catalyst 4500E series switch with Supervisor Engine 7L-E contains a denial of service DoS vulnerability when processing specially crafted packets that can cause a reload of the device. Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this...

Cisco TelePresence Supervisor DoS

Resources exhaustion on TCP packets processing...

Code injection

The encryption functionality in the Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via...

CVE-2013-1209: Improper Authentication

The encryption functionality in the Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via...

PT-2013-2974

Name of the Vulnerable Software and Affected Versions Cisco NX-OS on the Nexus 1000V affected versions not specified Description The issue is related to insufficient authentication between a Virtual Ethernet Module VEM and a Virtual Supervisor Module VSM in Cisco Nexus 1000V. This allows remote...

PT-2013-2972

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V affected versions not specified Description The encryption functionality in the Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication component does not properly authenticate VSM/VEM packets. This allows...

CVE-2013-1212: Undefined Security Weakness

The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or modify Virtual Supervisor Module VSM to VMware vCenter communication, via a crafted certificate, aka Bug ID CSCud14837...

CVE-2013-1236

Cisco TelePresence Supervisor MSE 8050 before 2.31.31 allows remote attackers to cause a denial of service CPU consumption or device reload by establishing TCP connections at a high rate, aka Bug IDs CSCuf76076 and CSCuf79763...

CVE-2013-1236

Cisco TelePresence Supervisor MSE 8050 before 2.31.31 allows remote attackers to cause a denial of service CPU consumption or device reload by establishing TCP connections at a high rate, aka Bug IDs CSCuf76076 and CSCuf79763...

PT-2013-2998

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Supervisor MSE 8050 versions prior to 2.31.31 Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption or device reload, by establishing TCP connections at a high rate...

CVE-2013-1236: Improper Input Validation

Cisco TelePresence Supervisor MSE 8050 before 2.31.31 allows remote attackers to cause a denial of service CPU consumption or device reload by establishing TCP connections at a high rate, aka Bug IDs CSCuf76076 and CSCuf79763...

Cisco TelePresence Supervisor MSE 8050 Denial of Service Vulnerability

Cisco TelePresence Supervisor MSE 8050 contains a vulnerability that may allow an unauthenticated, remote attacker to cause high CPU utilization and a reload of the affected system. Cisco has released software updates that address this vulnerability. Workarounds that mitigate this vulnerability a...

Code injection

Cisco IOS XE 03.02.00.XO.15.02XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service card reload via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456...

CVE-2012-4622

Cisco IOS XE 03.02.00.XO.15.02XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service card reload via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456...

CVE-2012-4622

The CVE-2012-4622 entry concerns Cisco Catalyst 4500E switches with Supervisor Engine 7L-E. A vulnerability in Cisco IOS XE 03.02.00.XO.15.0(2)XO on these devices allows remote attackers to trigger uncorrected ECC errors and cause a DoS by sending specially crafted/malformed packets, potentially ...

PT-2012-5525

Name of the Vulnerable Software and Affected Versions Cisco IOS XE version 03.02.00.XO.15.02XO on Catalyst 4500E series switches with a Supervisor Engine 7L-E card installed Description The issue allows remote attackers to cause a denial of service, resulting in a card reload, by sending malforme...

CVE-2012-4622: Undefined Security Weakness

Cisco IOS XE 03.02.00.XO.15.02XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service card reload via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456...

Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability

The Catalyst 4500E series switch with Supervisor Engine 7L-E contains a denial of service DoS vulnerability when processing specially crafted packets that can cause a reload of the device. Cisco has released software updates that address this vulnerability. Workarounds that mitigate this...

CVE-2012-2187

IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 1.13 and earlier generates weak RSA keys, which makes it easier for attackers to defeat cryptographic protection mechanisms via unspecified vectors...

CVE-2012-2187

CVE-2012-2187 affects IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 (versions 1.13 and earlier). The root cause is weak RSA key generation in the firmware, which may allow an attacker to remotely compromise the corresponding private key when using secure proto...