Cisco ASR 9000 Series Cisco IOS XR Command Injection Vulnerability

The Cisco ASR 9000 Series is a 9000 series enterprise router from Cisco, Inc.Cisco IOS XR is an operating system developed by Cisco for its network devices. A command injection vulnerability exists in Cisco IOS XR 5.1.0 and later in the Cisco ASR 9000 Series, which stems from a program that does...

CVE-2019-12717

A vulnerability in a CLI command related to the virtualization manager VMAN in Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. The vulnerability is due to insufficient validation of...

CVE-2019-12709 Cisco IOS XR Software for Cisco ASR 9000 VMAN CLI Privilege Escalation Vulnerability

A vulnerability in a CLI command related to the virtualization manager VMAN in Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. The...

PT-2019-3330

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers affected versions not specified Description The issue exists due to insufficient validation of arguments passed to a specific VMAN CLI command, allowing an...

PT-2019-3331

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description The issue is related to insufficient validation of arguments passed to a specific Virtualization Manager VMAN CLI command, allowing an authenticated, local attacker to execute...