PT-2015-7213

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 15.43S and 3S Description A local user can bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames. The vulnerability occurs because parameters to diagnostic commands at...

Cisco IOS / Cisco IOS XE multiple security vulnerabilities

Authentication bypass, DoS...

Cisco IOS XE SSHv2 RSA-Based User Authentication Bypass (CSCus73013)

The remote Cisco IOS XE device is missing a vendor-supplied security patch, and is configured for SSHv2 RSA-based user authentication. It is, therefore, affected by a flaw in the SSHv2 protocol implementation of the public key authentication method. An unauthenticated, remote attacker can exploit...

Cisco IOS XE IPv6 Snooping DoS (cisco-sa-20150923-fhs)

The remote Cisco IOS XE device is missing vendor-supplied security patches, and is configured for IPv6 snooping. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the IPv6 Snooping feature due to missing Control Plane Protection CPPr protection mechanisms. An...

Cisco IOS XE Network Address Translation and Multiprotocol Label Switching DoS (CSCut96933)

The remote Cisco IOS XE device is missing vendor-supplied security patches, and is configured for Network Address Translation NAT and/or Multiprotocol Label Switching MPLS. It is, therefore, affected by a flaw in the NAT and MPLS services due to improper processing of IPv4 packets. An...

CVE-2015-6280

The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote...

CVE-2015-6279

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3...

Design/Logic Flaw

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3...

CVE-2015-6278

CVE-2015-6278 affects Cisco IOS/IOS XE IPv6 First Hop Security snooping. A CPPr protection flaw allows remote attackers to cause a device reload via a flood of IPv6 ND packets; impact includes reboots, as described in Cisco advisory coverage (CISCO-SA-20150923-FHS) with related CVE-2015-6279. Aff...

CVE-2015-6279

Cisco IOS/IOS XE IPv6 First Hop Security Denial of Service vulnerabilities (CVE-2015-6279, with related CVE-2015-6278) affect Cisco IOS and IOS XE releases on platforms listed in the Cisco advisory. The flaw allows remote, unauthenticated attackers to cause device reloads by sending malformed IPv...

CVE-2015-6278: Improper Input Validation

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3...

CVE-2015-6280: Improper Authentication

The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote...

CVE-2015-6279: Improper Input Validation

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3...

Design/Logic Flaw

Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service device reload via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933...

CVE-2015-6282

Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service device reload via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933...

CVE-2015-6282

Cisco IOS XE Network Address Translation Denial of Service vulnerability (CVE-2015-6282) affects Cisco IOS XE Software for ASR 1000, ISR 4300/4400, and Cloud Services 1000v routers. The issue arises from improper processing of IPv4 packets that require NAT and MPLS, enabling an unauthenticated, r...

CVE-2015-6282: Improper Input Validation

Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service device reload via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933...

Cisco IOS XE Software Network Address Translation Denial of Service Vulnerability

A vulnerability in the processing of IPv4 packets that require Network Address Translation NAT and Multiprotocol Label Switching MPLS services of Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4300 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers could allo...

PT-2015-7148

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 2.x through 3.10.5S Cisco IOS XE versions 3.11.xS through 3.13.2S Cisco IOS XE versions 3.14.xS through 3.15.0S Description A vulnerability in the processing of IPv4 packets that require Network Address Translation NAT an...

PT-2015-2196

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.2 through 15.5 Cisco IOS XE versions 3.6E through 3.6.2E Cisco IOS XE versions 3.7E through 3.7.0E Cisco IOS XE versions 3.10S through 3.10.5S Cisco IOS XE versions 3.11S through 3.11.3S Cisco IOS XE versions 3.12S throug...