Cisco Releases Security Patches for TelePresence, RoomOS and Umbrella VA

Networking equipment maker Cisco has released security updates to address three high-severity vulnerabilities in its products that could be exploited to cause a denial-of-service DoS condition and take control of affected systems. The first of the three flaws, CVE-2022-20783 CVSS score: 7.5,...

Cisco IOS XR Software for ASR 9000 Series Routers Lightspeed Plus Line Cards DoS (cisco-sa-lsplus-Z6AQEOjk)

According to its self-reported version, Cisco IOS XR is affected by denial of service vulnerability due to a vulnerability in the data plane microcode of Lightspeed-Plus line cards that cause the line card to reset. An unauthenticated, remote attacker can exploit these by sending a specific IPv4 ...

CVE-2022-20758

A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...

Race condition

A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...

CVE-2022-20758 Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability

A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...

CVE-2022-20758

CVE-2022-20758 describes a DoS vulnerability in Cisco IOS XR’s BGP EVPN (L2VPN EVPN) handling. Affects the BGP EVPN processing of updates; an unauthenticated, remote attacker who controls a BGP speaker with a trusted peer connection to an affected device could trigger the vulnerability by sending...

CVE-2022-20758 Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability

A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...

Critical Auth Bypass Bug Reported in Cisco Wireless LAN Controller Software

Cisco has released patches to contain a critical security vulnerability affecting the Wireless LAN Controller WLC that could be abused by an unauthenticated, remote attacker to take control of an affected system. Tracked as CVE-2022-20695, the issue has been rated 10 out of 10 for severity and...

Cisco IOS XR BGP Ethernet VPN Denial of Service Vulnerability

Cisco IOS XR is a set of operating systems developed by Cisco for its network devices.A denial-of-service vulnerability exists in Cisco IOS XR BGP Ethernet VPN, which can be exploited by attackers to cause a denial of service...

Cisco IOS XR Lightspeed-Plus Line Cards拒绝服务漏洞

Cisco IOS XR is an operating system developed by Cisco for its network devices.A denial of service vulnerability exists in Cisco IOS XR Lightspeed-Plus Line Cards, which can be exploited by attackers to cause a denial of service...

Cisco IOS XR IPSec Denial of Service Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices.A denial-of-service vulnerability exists in Cisco IOS XR IPSec, which stems from buffer exhaustion while processing traffic on a configured IPsec tunnel, and can be exploited by an attacker to cause the device t...

Cisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service Vulnerability

A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause the line card to rese...

Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability

A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...

CVE-2022-20758

A vulnerability in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to the incorrect processing of a BGP update messa...

Cisco IOS XR缓冲区错误漏洞

Cisco IOS XR is an operating system developed by Cisco for its network devices.A denial of service vulnerability exists in Cisco IOS XR Lightspeed-Plus Line Cards, which can be exploited by attackers to cause a denial of service...

CVE-2022-25751

A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...

CVE-2022-26335

A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...

CVE-2022-0809

Out of bounds memory access in WebXR in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Cisco IOS XR Software Border Gateway Protocol DoS (cisco-sa-20100827-bgp)

According to its self-reported version, Cisco IOS XR Software 3.4.0 through 3.9.1, when BGP is enabled, is affected by a denial of service vulnerability. An unauthenticated, remote attacker could exploit this by sending corrupted transitive attributes, which allows remote attackers to cause a...

Cisco IOS XR Software Border Gateway Protocol DoS (cisco-sa-20090818-bgp)

According to its self-reported version, Cisco IOS XR Software with BGP enabled is affected by the following vulnerabilities: - Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS...