CVE-2017-12238

Cisco IOS on Catalyst 6800 Series switches (Cisco 6800-16P10G/16P10G-XL with Supervisor Engine 6T) is affected by CVE-2017-12238. The vulnerability stems from a memory management flaw in the VPLS code, exploitable by an unauthenticated, adjacent attacker who can flood the MAC address table with V...

CVE-2017-12238

A vulnerability in the Virtual Private LAN Service VPLS code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a C6800-16P10G or C6800-16P10G-XL type line card to crash, resulting in a denial of service DoS condition...

Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2017-34214)

The Cisco Catalyst 3650 and 3850 switches are both switch products from Cisco, Inc.IOS XE Software is one of the operating systems used for network devices. wireless controller manager is one of the wireless controller management programs. A denial of service vulnerability exists in the wireless...

CVE-2017-12238: Undefined Security Weakness

A vulnerability in the Virtual Private LAN Service VPLS code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a C6800-16P10G or C6800-16P10G-XL type line card to crash, resulting in a denial of service DoS condition...

CVE-2015-7256

CVE-2015-7256 affects multiple ZyXEL devices (NWA1100-N/NH/NWA1121-NI/NWA1123-AC/NWA1123-NI, DSL CPEs, small business gateways, switches, etc.) where non-unique X.509 certificates and SSH host keys are used across devices. Root cause: embedded devices reuse certificates/keys, enabling impersonati...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...

The vulnerability of the authentication module of Huawei Campus S5700, S5300, S6300, S6700, S7700, S9300, and S9700 series network switches allows a hacker to trigger a service failure.

The vulnerability of the authentication module for Huawei Campus S5700, S5300, S6300, S6700, S7700, S9300, and S9700 series network switches is related to defects in the authentication process violation of initialization of the array. Exploiting this vulnerability allows an attacker, operating...

CVE-2017-6720

A vulnerability in the Secure Shell SSH subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service DoS condition. The vulnerability is due to improper processing of SSH...

CVE-2017-6720

A vulnerability in the Secure Shell SSH subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service DoS condition. The vulnerability is due to improper processing of SSH...

CVE-2017-6720

A vulnerability in the Secure Shell SSH subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service DoS condition. The vulnerability is due to improper processing of SSH...

CVE-2017-6720

The CVE-2017-6720 issue affects Cisco Small Business Managed Switches (300, 500, 350, 350X, 550X series and ESW2 line) where the SSH subsystem mishandles SSH messages, allowing an authenticated remote attacker to trigger a reload and cause a DoS. Root cause: improper processing of SSH connections...

CVE-2017-6720: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Secure Shell SSH subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service DoS condition. The vulnerability is due to improper processing of SSH...

Cisco Small Business Managed Switches Denial of Service Vulnerability

Cisco Small Business 300 Series Managed Switches and so on are the switch equipment of the American Cisco Cisco company. the Secure Shell SSH subsystem is one of the data encryption transmission subsystems. A denial of service vulnerability exists in the SSH subsystem in several Cisco products,...

Cisco Small Business Managed Switches Denial of Service Vulnerability

A vulnerability in the Secure Shell SSH subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service DoS condition. The vulnerability is due to improper processing of SSH...

Input validation

A vulnerability in the dynamic access control list ACL feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent attacker to cause dynamic ACL assignment to fail and the port to fail open. This could allow the attacker to pass traffic...

CVE-2017-12213

A vulnerability in the dynamic access control list ACL feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent attacker to cause dynamic ACL assignment to fail and the port to fail open. This could allow the attacker to pass traffic...

CVE-2017-12213

The CVE-2017-12213 issue affects Cisco Catalyst 4000 Series Switches running IOS XE. It stems from an uncaught error when reassigning the auth-default-ACL dynamic ACL after 802.1x authentication fails, allowing an unauthenticated adjacent attacker to cause the dynamic ACL to fail open and forward...

CVE-2017-12213: Improper Authentication

A vulnerability in the dynamic access control list ACL feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent attacker to cause dynamic ACL assignment to fail and the port to fail open. This could allow the attacker to pass traffic...

CVE-2017-3752

An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First OSPF routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers,...

Design/Logic Flaw

An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First OSPF routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers,...