CVE-2016-6474: Improper Authentication

A vulnerability in the implementation of X.509 Version 3 for SSH authentication functionality in Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on an affected system. More Information: CSCuv89417. Known Affected Releases: 15.52.25T. Known...

Cisco IOS and Cisco IOS XE Software Zone-Based Firewall Feature Bypass Vulnerability

A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. The vulnerability is due to a logic flaw in a corner case scenario. An...

PT-2016-7697

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software versions prior to 15.62T0.1 Cisco IOS and Cisco IOS XE Software versions prior to 15.62.0.1aT0 Cisco IOS and Cisco IOS XE Software versions prior to 15.62.19T Cisco IOS and Cisco IOS XE Software versions pri...

PT-2016-6946

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE Software versions prior to 15.24E1 Cisco IOS and IOS XE Software versions prior to 15.24E2 Cisco IOS and IOS XE Software versions prior to 15.24E3 Cisco IOS and IOS XE Software versions prior to 15.24EA4 Cisco IOS and IOS ...

CVE-2016-6450

A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying operating system. This vulnerability affects the following products if they are running a vulnerable release of Cisco IOS XE...

CVE-2016-6450

A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying operating system. This vulnerability affects the following products if they are running a vulnerable release of Cisco IOS XE...

CVE-2016-6450

CVE-2016-6450 affects Cisco IOS XE Software where the unbundle utility contains an input validation flaw. An authenticated, local attacker with privilege level 15 can abuse the installation utility to write to files on the underlying OS, potentially compromising system integrity and obtaining a s...

CVE-2016-6450

A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying operating system. This vulnerability affects the following products if they are running a vulnerable release of Cisco IOS XE...

CVE-2016-6450: Improper Input Validation

A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying operating system. This vulnerability affects the following products if they are running a vulnerable release of Cisco IOS XE...

Cisco IOS XE Software Directory Traversal Vulnerability

A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying operating system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced source...

Cisco IOS XE Software Directory Traversal Vulnerability

A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying operating system. The vulnerability is due to insufficient validation of files submitted to the affected installation utility...

PT-2016-6923

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 3.70 through 16.4.1 Cisco IOS XE Software versions Denali-16.1.3 through Denali-16.3.1 Description A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local...

Cisco IOS XE IKEv1 Fragmentation DoS (cisco-sa-20160928-ikev1)

According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 1 IKEv1 subsystem due to improper handling of fragmented IKEv1 packets. An unauthenticated, remote...

Cisco IOS XE TL1 Request Handling RCE (cisco-sa-20161102-tl1)

According to its self-reported version and model, the Cisco IOS XE software running on the remote ASR device is affected by a remote code execution vulnerability in the Transaction Language 1 TL1 code due to an overflow condition caused by improper bounds checking on certain input when handling T...

CVE-2016-6441

A vulnerability in the Transaction Language 1 TL1 code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers ASR902, ASR90...

Design/Logic Flaw

A vulnerability in the Transaction Language 1 TL1 code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers ASR902, ASR90...

CVE-2016-6441

A vulnerability in the Transaction Language 1 TL1 code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers ASR902, ASR90...

CVE-2016-6441

CVE-2016-6441 affects Cisco ASR 900 Series Aggregation Services Routers (ASR902/903/907) running Cisco IOS XE, where the TL1 code processes input and fails bounds checks, allowing an unauthenticated remote attacker to cause a reload or execute arbitrary code. Affected releases include 3.17.0S–3.1...

CVE-2016-6441: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Transaction Language 1 TL1 code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers ASR902, ASR90...

CVE-2016-6438

A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. This vulnerability affects the following releases of Cisco IOS...