CVE-2016-6404

Cross-site scripting XSS vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.52T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854...

Code injection

The Data in Motion DMo application in Cisco IOS 15.61T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted packet, aka Bug IDs CSCuy82904, CSCuy82909, and CSCuy82912...

Cross site scripting

Cross-site scripting XSS vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.52T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854...

CVE-2016-6403

The CVE-2016-6403 issue affects Cisco IOS and IOS XE with the IOx feature set, where the Data in Motion (DMo) application can be triggered remotely to cause a denial-of-service. The root cause is insufficient input validation in the DMo component, allowing an unauthenticated, remote attacker to c...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in several products. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the following Cisco Security Advisories and appl...

Cisco IOS and IOS XE Software Data in Motion Denial of Service Vulnerability

A vulnerability in the Data in Motion DMo application in Cisco IOS and IOS XE software with the IOx feature set could allow an unauthenticated, remote attacker to to cause a denial of service DoS condition in the DMo process. The vulnerability is due to insufficient input validation by the affect...

Cisco IOS XE NTP Packet Handling Remote DoS (cisco-sa-20160804-wedge)

According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability due to insufficient checks on clearing invalid Network Time Protocol NTP packets from the interface queue. An unauthenticated, remote...

Cisco IOS XE Software Border Gateway Protocol Message Processing DoS (cisco-sa-20160715-bgp)

The Cisco IOS XE Software running on the remote device is missing a security patch. It is, therefore, affected by a denial of service vulnerability in the Border Gateway Protocol BGP message processing functions due to improper processing of BGP attributes. An authenticated, remote attacker can...

Cisco IOS XE Software Border Gateway Protocol Message Processing Denial of Service Vulnerability

A vulnerability in Border Gateway Protocol BGP message processing functions of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of crafted BGP attributes. An attacker could exploit this...

Code injection

Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service device reload via crafted attributes in a BGP message, aka Bug ID CSCuz21061...

Sierra Wireless AirLink Raven XE/XT Credential Sniffing Vulnerability

The AirLink Raven XT and XE are M2M gateways from Sierra Wireless that provide remote monitoring and control of industrial applications. A credential sniffing vulnerability exists in AirLink Raven XT and XE. An attacker can exploit the vulnerability to sniff credentials and log into the system...

Sierra Wireless AirLink Raven XE/XT Unauthorized Access Vulnerability

The AirLink Raven XT and XE are M2M gateways from Sierra Wireless that provide remote monitoring and control of industrial applications. An unauthorized access vulnerability exists in AirLink Raven XT and XE. An unauthenticated, remote attacker could exploit the vulnerability to access system...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

Cisco IOS software contains vulnerabilities in the Secure Shell SSH services and Cisco IOS XE software. When these services are operated, a “disruption of service” can be triggered by sending specially crafted SSH requests...

Cisco IOS-XE Zone-Based Firewall Feature Security Bypass (CSCun96847)

According to its self-reported version, the Cisco IOS-XE software running on the remote device is affected by a security bypass vulnerability in the Zone-Based Firewall feature due to insufficient zone checking for traffic belonging to existing sessions. An unauthenticated, remote attacker can...

CVE-2016-1428

Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service device restart via a sequence of crafted SNMP read requests, aka Bug ID CSCux13174...

Double free

Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service device restart via a sequence of crafted SNMP read requests, aka Bug ID CSCux13174...

CVE-2016-1428

Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service device restart via a sequence of crafted SNMP read requests, aka Bug ID CSCux13174...

Sierra Wireless AirLink Raven XE Industrial 3G Gateway CSRF / File Upload

Sierra Wireless AirLink Raven XE Industrial 3G Gateway - Multiple Vulnerabilities About http://www.sierrawireless.com/products-and-solutions/gateway-solutions/raven-series/ Rugged Design and Advanced Security for Fixed and Portable Wireless Communication Raven XE/XT Compact design for industrial...

CVE-2016-1428

CVE-2016-1428 is a Cisco IOS XE SNMP subsystem vulnerability described as a double‑free error in the SNMP processing path. According to sources, it affects Cisco IOS XE releases 3.15S, 3.16S, and 3.17S and can be exploited by an authenticated, remote attacker via crafted SNMP read requests to tri...

Cisco IOS XE libsrtp DoS (CSCux04317)

The remote Cisco IOS XE device is missing vendor-supplied security patches, and it is configured to use the Cisco Unified Border Element CUBE or Session Border Controller SBC features. It is, therefore, affected by an integer underflow condition in the Secure Real-Time Transport Protocol SRTP...