PT-2015-4830

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.5S and earlier Cisco IOS XE affected versions not specified Description A denial of service issue exists due to improper processing of crafted RADIUS packets. An authenticated, remote attacker could exploit this by sendin...

PT-2015-4831

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.10S Description A vulnerability exists in the Overlay Transport Virtualization OTV implementation, allowing remote attackers to cause a denial of service device reload via a series of packets that trigger improper...

Cisco IOS XE AppNav Component RCE

The Cisco IOS XE software running on the remote device is affected by a vulnerability in the AppNav component due to the improper processing of TCP packets. An unauthenticated, remote attacker, using a crafted TCP packet, can exploit this to cause a device reload or to execute arbitrary code in t...

Cisco IOS XE Common Flow Table DoS

The Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Common Flow Table CFT feature due to improper processing of IPv6 packets encapsulated inside IPv4 UDP packets. An unauthenticated, remote attacker, using malformed packets, can exploit...

Cisco IOS XE Layer 4 Redirect DoS

The Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability due to improper processing of IP packets by the Layer 4 Redirect L4R feature. An unauthenticated, remote attacker, using crafted IPv4 or IPv6 packets, can exploit this to cause a device reload...

Cisco IOS XE Autonomic Networking Infrastructure Multiple Vulnerabilities (cisco-sa-20150325-ani)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by the following vulnerabilities : - A flaw exists in the ANI due to failing to properly validate Autonomic Networking AN messages. This could allow a remote attacker to spoof an Autonomic...

Cisco IOS XE IPv6 DoS

The Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability due to improper parsing of IPv6 packets. An unauthenticated, remote attacker, using crafted IPv6 packets, can exploit this to cause a device reload. TRUSTED...

Cisco IOS XE Fragmented Packet DoS

The Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the high-speed logging HSL feature due to improper processing of fragmented IP packets. An unauthenticated, remote attacker, by sending a large number of oversized packets, can exploit this ...

CVE-2015-0688

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

Code injection

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

CVE-2015-0688

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

CVE-2015-0688

CVE-2015-0688 affects Cisco IOS XE 3.10.2S on ASR 1000 with an Embedded Services Processor (ESP). The issue arises when NAT is enabled and malformed H.323 packets are processed, allowing an unauthenticated, remote attacker to cause a denial of service by crashing the ESP module. Exploitation is r...

CVE-2015-0688: Undefined Security Weakness

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

Cisco ASR1000 Series Routers ESP Module Denial of Service Vulnerability

A vulnerability in the Embedded Services Processor ESP module of Cisco ASR 1000 Series Routers running Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of malformed H.323 packets by an...

CVE-2015-0685

Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service device hang via crafted IP packets, aka Bug ID CSCub31873...

Design/Logic Flaw

Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service device hang via crafted IP packets, aka Bug ID CSCub31873...

CVE-2015-0685

Cisco IOS XE before 3.7.5S on ASR 1000 devices is vulnerable to DoS due to improper handling of route adjacencies, exploitable by remote attackers sending crafted IP packets. The root cause is improper processing of route adjacencies in the affected code path. Impact is device hang/DoS. Cisco has...

PT-2015-4811

Name of the Vulnerable Software and Affected Versions Cisco IOS XE version 3.10.2S Description The issue is caused by improper handling of malformed H.323 packets by an affected device when the device is configured to use Network Address Translation NAT. An unauthenticated, remote attacker could...

CVE-2015-0685: Improper Input Validation

Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service device hang via crafted IP packets, aka Bug ID CSCub31873...

Cisco IOS XE Software mDNS Gateway DoS

The remote Cisco device is running a version of Cisco IOS XE software that is affected by a vulnerability in the multicast DNS gateway component due to improper validation of mDNS packets. A remote, unauthenticated attacker, by sending crafted packets to UDP port 5353, can exploit this to cause a...