Cisco IOS XE Software AAA Login Denial of Service Vulnerability

A vulnerability in the Authentication, Authorization, and Accounting AAA service for remote Secure Shell Host SSH connections to the device for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the vulnerable device to reload. SPDX-FileCopyrightText: 2016 Greenbone AG...

Cisco IOS and IOS XE Software AAA Login Denial of Service Vulnerability

A vulnerability in the Authentication, Authorization, and Accounting AAA service for remote Secure Shell Host SSH connections to the device for Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the vulnerable device to reload. The vulnerability is due to an...

Cisco IOS XE Software NAT Denial of Service Vulnerability

A vulnerability in the implementation of Network Address Translation NAT functionality in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper handling of malformed ICMP packets by the affected software. ...

PT-2016-6863

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.2 through 15.6 Cisco IOS XE versions 3.6 through 3.17 and 16.1 Description Multiple vulnerabilities in the multicast subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to create a...

PT-2016-6869

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 and 15.0 through 15.6 Cisco IOS XE versions 2.1 through 3.18 and 16.2 Description The issue is related to the Authentication, Authorization, and Accounting AAA service for remote Secure Shell Host SSH...

PT-2016-6868

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.3 Cisco IOS XE versions 3.1 through 3.9 Description Multiple vulnerabilities in the multicast subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to create a...

PT-2016-6862

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 and 15.0 through 15.6 Cisco IOS XE versions 3.1 through 3.18 and 16.1 Description A vulnerability in the Internet Key Exchange version 1 IKEv1 fragmentation code could allow an unauthenticated, remote attacker to cause ...

PT-2016-6861

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 Cisco IOS versions 15.0 through 15.6 Cisco IOS XE versions 3.1 through 3.15 Description A flaw in the DNS forwarder functionality allows remote attackers to obtain sensitive information from process memory ...

PT-2016-6865

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.2 Cisco IOS XE versions 3.2 through 3.8 Description The Smart Install client feature in Cisco IOS and IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to...

PT-2016-6860

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 Cisco IOS XE versions 3.14 through 3.16 and 16.1 Description A vulnerability in the IP Detail Record IPDR code could allow an unauthenticated, remote attacker to cause an affected system to reload. The vulnerability is...

PT-2016-6859

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.1 through 3.17 Cisco IOS XE versions 16.1 through 16.2 Description A vulnerability in the implementation of Network Address Translation NAT functionality could allow an unauthenticated, remote attacker to cause an...

PT-2016-6864

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.6 Cisco IOS XE versions 3.1 through 3.17 and 16.2 Description A vulnerability in the H.323 subsystem could allow an unauthenticated, remote attacker to create a denial of service DoS...

PT-2016-6866

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.1 through 3.17 Cisco IOS XE version 16.1 on 64-bit platforms Description A vulnerability in the IPv4 fragment reassembly function could allow an unauthenticated, remote attacker to cause an affected device to reload due...

Cisco IOS XE IKEv1 Packet Handling Remote Information Disclosure (cisco-sa-20160916-ikev1) (BENIGNCERTAIN)

According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by an information disclosure vulnerability, known as BENIGNCERTAIN, in the Internet Key Exchange version 1 IKEv1 subsystem due to improper handling of IKEv1 security...

Code injection

The Cisco Application-hosting Framework CAF component in Cisco IOS 15.61T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773...

CVE-2016-6412: Improper Input Validation

The Cisco Application-hosting Framework CAF component in Cisco IOS 15.61T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773...

CVE-2016-6414

iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223...

Command injection

iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223...

CVE-2016-6414

Cisco IOS and IOS XE (affected: iox command) are vulnerable to local command injection via crafted iox command line options, allowing an authenticated local attacker to execute arbitrary commands in the IOx Linux guest OS. Root cause: insufficient input validation of iox command line arguments. I...

CVE-2016-6414

iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223...