CVE-2013-1154

The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service SSL/TLS layer outage via malformed ...

Code injection

The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service SSL/TLS layer outage via malformed ...

CVE-2013-1154

The CVE-2013-1154 entry concerns Cisco Small Business switches (200 Series Smart Switch, 300 Series Managed Switch, and 500 Series Stackable Managed Switch) with software version 1.2.7.76 and earlier. The issue allows remote attackers to cause a denial of service on SSH/SSL-related features by se...

Cisco Small Business Switches SSH Packet Processing Denial of Service Vulnerability

Cisco Small Business Switches contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition to features that rely on SSH or SSL protocols. The vulnerability is due to the processing flaw in malformed packets in the code used by SSH and SSL...

CVE-2013-0120

CVE-2013-0120 affects Dell PowerConnect 6248P switches. The vulnerability is a denial-of-service caused by parsing malformed requests to the device’s web interface, which could cause the switch to crash and become unavailable. Public documentation from NVD confirms the issue can be triggered remo...

CVE-2013-1100

The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service device crash via crafted packets on TCP port 1 80 or 2 443, aka Bug ID CSCuc53853...

Code injection

The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service device crash via crafted packets on TCP port 1 80 or 2 443, aka Bug ID CSCuc53853...

CVE-2013-1100

The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service device crash via crafted packets on TCP port 1 80 or 2 443, aka Bug ID CSCuc53853...

CVE-2012-4661

Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.34, 8.4 before 8.44.4, 8.5 before 8.51.13, and 8.6 before 8.61.3 and th...

CVE-2012-4662

The DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.25, 8.4 before 8.42.5, and 8.5 before 8.51.13 and the Firewall Services Module FWSM 4.1 before 4.17 in...

[security bulletin] HPSBHF02819 SSRT100920 rev.2 - HP, 3COM, and H3C Routers & Switches, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03515685 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03515685 Version: 2 HPSBHF02819...

Cisco Catalyst switches DoS

Crash on malformed packet parsing...

Code injection

The Cisco Application Control Engine ACE module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer LB queues, which allows remote attackers to cause a denial of service incorrect memory access and module reboot via application traffic, aka Bug ID CSCtw70879...

CVE-2012-3919

The Cisco Application Control Engine ACE module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer LB queues, which allows remote attackers to cause a denial of service incorrect memory access and module reboot via application traffic, aka Bug ID CSCtw70879...

CVE-2012-3919

CVE-2012-3919 affects the Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers. The issue is that the ACE module does not properly monitor Load Balancer (LB) queues, which can lead to a denial of service via application traffic, described as an incorrect...

Hard-Coded Password Leaves GarrettCom Switches Open to Attack, ICS-CERT Warns

The Department of Homeland Security is warning users of some of GarrettCom’s switches that there is a hard-coded password in a default account on the devices, which are deployed in a number of critical infrastructure industries, that could allow an attacker to take control of them. A researcher a...

CVE-2012-1338

Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service device reload by completing local web authentication quickly, aka Bug ID CSCts88664...

Design/Logic Flaw

Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability HA policy is configured for Reset, allows remote attackers to cause a denial of service device reset via a malformed Cisco Discovery Protocol CDP packet, aka Bug IDs CSCtk34535 and CSCtk19132...

CVE-2012-1338

Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service device reload by completing local web authentication quickly, aka Bug ID CSCts88664...

CVE-2012-2469

Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches is affected by CVE-2012-2469. The issue arises when the High Availability (HA) policy is configured for Reset and a malformed Cisco Discovery Protocol (CDP) packet is received, potentially causing a denial of service via device rese...