Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2015-08466)

Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in Cisco IOS XE Software. An attacker could exploit this vulnerability to cause affected devices to reload and deny service to legitimate users...

Design/Logic Flaw

Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service device reload via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405...

CVE-2015-6431

Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service device reload via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405...

CVE-2015-6431

CVE-2015-6431 affects Cisco IOS XE 16.1.1 and relates to denial of service via a frame with a source MAC address of all zeros (0000:0000:0000). An unauthenticated, adjacent attacker can trigger a device reload by sending such packets, described in Cisco’s CSCux48405 advisory and related Nessus en...

CVE-2015-6431

Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service device reload via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405...

CVE-2015-6431: Undefined Security Weakness

Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service device reload via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405...

Cisco IOS XE Software Packet Processing Denial of Service Vulnerability

Cisco IOS XE Software Release 16.1.1 contains a vulnerability that could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to incorrect processing of packets that have a source MAC address of 0000:0000:0000. An attacker could exploit this...

PT-2015-7251

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 16.1.1 Description The issue is caused by incorrect processing of packets with a source MAC address of 0000:0000:0000, allowing an unauthenticated, adjacent attacker to cause the device to reload by sending a frame with a...

Design/Logic Flaw

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service IPsec connection termination via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236...

CVE-2015-6429

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service IPsec connection termination via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236...

CVE-2015-6429

Cisco IOS/IOS XE (12.x) IKEv1 state machine vulnerability (CVE-2015-6429): insufficient condition checks in the IKEv1 state machine allow unauthenticated remote attackers to tear down IPsec tunnels, causing a partial DoS. Affected: IOS 15.4–15.6 and IOS XE 3.15–3.17. Exploitation: remote, via spo...

CVE-2015-6429: Undefined Security Weakness

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service IPsec connection termination via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236...

PT-2015-7250

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.4 through 15.6 Cisco IOS XE versions 3.15 through 3.17 Description The issue is related to the IKEv1 state machine in Cisco IOS and Cisco IOS XE Software, which allows an unauthenticated, remote attacker to tear down vali...

Cisco IOS XE Software IPv6 Neighbor Discovery DoS (CSCup28217)

The remote Cisco IOS XE device is missing a vendor-supplied security patch, and is not configured to limit the IPv6 neighbor discovery ND cache. It is, therefore, affected by a denial of service vulnerability due to insufficient bounds on internal tables. An unauthenticated, adjacent attacker can...

Cisco ASR 1000 IOS XE安全绕过漏洞

漏洞详情： CVE ID CVE-2015-6383 漏洞描述 Cisco IOS XE on ASR 1000是美国思科（Cisco）公司的一套运行于ASR 1000系列路由器设备中的操作系统。 Cisco ASR 1000设备上的IOS XE 15.43S版本中存在安全漏洞，由于程序未能正确加载软件程序包。本地攻击者可通过使用命令行输入特制的文件名，利用该漏洞绕过许可限制，获取root权限。 参考链接 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-6383...

CVE-2015-6383

Cisco IOS XE 15.43S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130...

CVE-2015-6383

Cisco IOS XE 15.4(3)S on ASR 1000 devices is affected by CVE-2015-6383 due to improper loading of software packages. A local attacker (no authentication required beyond local access) can craft filenames via the CLI to bypass license restrictions and gain root privileges. Root cause: failure to lo...

CVE-2015-6383: Undefined Security Weakness

Cisco IOS XE 15.43S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130...

Cisco ASR 1000 Series Root Shell License Bypass Vulnerability

A vulnerability in the way software packages are loaded in Cisco IOS XE Software for the Cisco Aggregation Services Routers ASR 1000 Series could allow an authenticated, local attacker to gain restricted root shell access. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be...

Cisco IOS XE 3S Platforms Series root Shell License Bypass Vulnerability

A vulnerability in one of the diagnostic commands in the Cisco IOS XE operating system for Cisco IOS XE 3S platforms could allow an authenticated, privileged, local attacker to gain restricted root shell access. The root shell is provided for advanced troubleshooting with Cisco Technical Assistan...