CVE-2019-1862

CVE-2019-1862 is a vulnerability in the Cisco IOS XE Web UI that allows an authenticated, remote attacker with admin access to execute arbitrary commands as root on the device. It stems from improper sanitization of user-supplied input on a Web UI form, enabling a crafted input parameter to run c...

Cisco IOS XE Software Web UI Command Injection Vulnerability

A vulnerability in the web-based user interface Web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes...

PT-2019-2325

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the web-based user interface Web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell o...

CVE-2019-1862: Improper Input Validation

A vulnerability in the web-based user interface Web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes...

Rockwell Automation Stratix Ethernet Switches < 15.3 IOS DHCP Reload DOS

Binary data 720230.prm...

Cisco IOS XE Software Arbitrary File Upload Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the web UI framework of Cisco IOS XE Software could allow an authenticated, remote attacker to make unauthorized changes to the filesystem of the affected device.The vulnerability is due to improper...

Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an...

Cisco IOS XE Software for Cisco Catalyst Switches IPv4 Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the IP Version 4 IPv4 processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an unauthenticated, remote attacker to cause high CPU...

Cisco IOS XE Router Version Detection

Binary data 700538.prm...

Cisco IOS XE Router Model Detection

Binary data 700537.prm...

Cisco IOS-XE Device Detection

Binary data 700531.prm...

The vulnerability in the implementation of the Performance Routing Protocol Version 3 on the Cisco IOS XE operating system allows a attacker to cause a service failure.

The vulnerability of the Performance Routing Protocol Version 3 PfRv3 implementation in the Cisco IOS XE operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets t...

The vulnerability of the Network-Based Application Recognition technology implementation in Cisco IOS and Cisco IOS XE operating systems allows attackers to trigger a service failure.

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

The vulnerability of the Hot Standby Router Protocol component in Cisco IOS XE and Cisco IOS operating systems allows attackers to compromise the confidentiality of protected information.

The vulnerability of the Hot Standby Router Protocol HSRP component in Cisco IOS XE and Cisco IOS operating systems is related to incorrect initialization of resources. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...

The vulnerability of the Web Services Management Agent web interface of the Cisco IOS XE operating system allows a hacker to execute commands with elevated privileges.

The vulnerability of the Web Services Management Agent component in the Cisco IOS XE operating system exists due to the lack of checks and cleanups for input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges...

The vulnerability in the implementation of SMS processing functions in Cisco IOS and Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the SMS processing function in Cisco IOS and Cisco IOS XE operating systems exists due to errors in the processing of SMS Protocol Data Units PDUs, which are encoded using a specific set of symbols. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems allows a hacker to trigger a service failure.

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

The vulnerability of the Network-Based Application Recognition technology implementation in Cisco IOS and Cisco IOS XE operating systems allows attackers to trigger a service failure.

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

The vulnerability of the Cisco IOS XE operating system, which allows a hacker to execute arbitrary commands with elevated privileges

The vulnerability of the Cisco IOS XE operating system exists due to insufficient checks on commands provided by users. Exploiting this vulnerability allows a malicious actor, after verifying their identity, to execute arbitrary commands with elevated privileges by sending specially crafted...

The vulnerability in the Cisco IOS XE operating system’s web interface, related to insufficient validation of input data, allows attackers to execute arbitrary commands.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...