1628 matches found
CVE-2016-6428
Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349...
CVE-2016-6428
Cisco IOS XR 6.1.1 is affected by a local privilege escalation vulnerability (CVE-2016-6428) where an authenticated local attacker with admin privileges can execute arbitrary OS commands as root due to incorrect permissions. The issue, tracked as CSCva38349, is addressed by Cisco with software up...
Cisco IOS XR Software Command-Line Interface Privilege Escalation Vulnerability (cisco-sa-20161005-iosxr)
A vulnerability in the command-line interface CLI of IOS-XR series software could allow an authenticated, local attacker to execute arbitrary code on a targeted system at the root privilege level. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...
CVE-2016-6421
Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service process restart via a crafted OSPF Link State Advertisement LSA update, aka Bug ID CSCvb05643...
CVE-2016-6421
Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service process restart via a crafted OSPF Link State Advertisement LSA update, aka Bug ID CSCvb05643...
CVE-2016-6421
Cisco IOS XR 5.2.2 is affected by CVE-2016-6421 due to a memory error in OSPF LSA processing that allows unauthenticated, remote attackers to cause a DoS by sending a crafted OSPF LSA update, causing the OSPF process to restart. This is tied to Bug ID CSCvb05643. Public references include Cisco a...
Cisco IOS XR Software Command-Line Interface Privilege Escalation Vulnerability
A vulnerability in the command-line interface CLI of IOS-XR series software could allow an authenticated, local attacker to execute arbitrary code on a targeted system at the root privilege level. The vulnerability is due to incorrect permissions given to a set of users. An attacker could exploit...
Cisco IOS XR Software Open Shortest Path First Link State Advertisement Denial of Service Vulnerability (cisco-sa-20160928-ospf)
A vulnerability in the implementation of Open Shortest Path First OSPF Link State Advertisement LSA functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. Copyright C 2016 Greenbone Networks GmbH Some text descriptions...
Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2016-08560)
Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A denial of service vulnerability exists in the implementation of the Open Shortest Path First Link State Advertisement...
Cisco IOS XR Software Open Shortest Path First Link State Advertisement Denial of Service Vulnerability
A vulnerability in the implementation of Open Shortest Path First OSPF Link State Advertisement LSA functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a memory error in OSPF. An attacker...
Cisco IOS XR IKEv1 Packet Handling Remote Information Disclosure (cisco-sa-20160916-ikev1) (BENIGNCERTAIN)
According to its self-reported version and configuration, the Cisco IOS XR software running on the remote device is affected by an information disclosure vulnerability, known as BENIGNCERTAIN, in the Internet Key Exchange version 1 IKEv1 subsystem due to improper handling of IKEv1 security...
The equation then exposed 0day vulnerabilities: ultra 8 4 million Cisco devices affected-vulnerability warning-the black bar safety net
A little while ago the NSA equation organization is the Black event, may be the most affected not the Government of the United States, but Cisco--because of this event, published a large number for a Cisco security product vulnerabilities using tools, Cisco have to an individual to survey researc...
CVE-2016-6415
The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association SA negotiation request, aka Bu...
Cisco IKEv1 Information Disclosure (BENIGNCERTAIN; CVE-2016-6415)
A vulnerability exists in IKEv1 packet processing code in Cisco IOS, Cisco IOS XE and Cisco IOS XR Software. The vulnerability , known as Pix Pocket, is due to insufficient condition checks in the IKEv1 security negotiation requests. A successful could cause disclosure of confidential information...
Cisco IOS XR Software IKEv1 Information Disclosure Vulnerability (cisco-sa-20160916-ikev1)
A vulnerability in Internet Key Exchange version 1 IKEv1 packet processing code in Cisco IOS XR Software could allow an unauthenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. SPDX-FileCopyrightText: 2016 Greenbone AG Some text...
CVE-2016-1433
Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service OSPFv3 process reload via crafted OSPFv3 packets, aka Bug ID CSCuz66289...
Design/Logic Flaw
Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service OSPFv3 process reload via crafted OSPFv3 packets, aka Bug ID CSCuz66289...
CVE-2016-1433
Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service OSPFv3 process reload via crafted OSPFv3 packets, aka Bug ID CSCuz66289...
CVE-2016-1433
Cisco IOS XR (6.0 and 6.0.1) running on Cisco NCS 6000 devices is affected by a denial-of-service vulnerability in OSPFv3 packet processing (Bug CSCuz66289). Exploitation can trigger an OSPFv3 process reload via specially crafted OSPFv3 packets, leading to a limited DoS condition on the device. T...