CVE-2019-1749: Improper Input Validation

A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router ASR 900 Route Switch Processor 3 RSP3 could allow an unauthenticated, adjacent attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The...

PT-2019-1576

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to 7.35N11 Description The issue is related to an incorrect allocation of an internal interface index in the Fibre Channel over Ethernet FCoE protocol implementation. This could allow an unauthenticated,...

PT-2019-1569

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V Switch for VMware vSphere versions prior to 5.21SV31.4b Cisco Nexus 3000 Series Switches versions prior to 7.03I74 Cisco Nexus 3500 Platform Switches versions prior to 7.03I74 Cisco Nexus 2000, 5500, 5600, and 6000 Series...

PT-2019-1531

Name of the Vulnerable Software and Affected Versions Cisco HyperFlex Software versions prior to 3.52a Description A vulnerability in the cluster service manager of Cisco HyperFlex Software could allow an unauthenticated, adjacent attacker to execute commands as the root user. The issue is due to...

PT-2019-1387

Name of the Vulnerable Software and Affected Versions Cisco Connected Mobile Experiences CMX affected versions not specified Description A vulnerability in the Cisco Connected Mobile Experiences CMX software could allow an unauthenticated, adjacent attacker to access sensitive data on an affected...

PT-2018-13010

Name of the Vulnerable Software and Affected Versions Cisco Industrial Network Director affected versions not specified Description A denial of service DoS condition can be caused by an unauthenticated, adjacent attacker due to improper handling of DHCP lease requests in the DHCP service. The...

CVE-2018-0475: Improper Input Validation

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

PT-2018-2012

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software affected versions not specified Description The issue is due to improper input validation when handling Cluster Management Protocol CMP messages, which could allow an unauthenticated, adjacent attacker to...

PT-2018-2100

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A vulnerability in the VLAN Trunking Protocol VTP subsystem could allow an unauthenticated, adjacent attacker to corrupt the internal VTP database on an...

PT-2018-2104

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the errdisable per VLAN feature could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service DoS condition...

PT-2018-8848

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 16.6.1 through 16.6.2 Description A vulnerability in the Cisco Discovery Protocol CDP module could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of service DoS...

PT-2018-18322

Name of the Vulnerable Software and Affected Versions: Huawei B315s-22 version 21.318.01.00.26 Description: The issue is an information leak that allows unauthenticated adjacent attackers to obtain device information. Recommendations: For version 21.318.01.00.26, at the moment, there is no...

PT-2018-8732

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: A buffer overflow condition in the IGMP Snooping subsystem of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code and gain full...

PT-2018-8690

Name of the Vulnerable Software and Affected Versions: Cisco Wireless LAN Controller version 8.5.103.0 Description: A vulnerability in the 802.11 frame validation functionality could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a...

PT-2018-8705

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers affected versions not specified Description: A vulnerability in the software could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affecte...

PT-2017-12455

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800, 2800, and 3800 Series Access Points affected versions not specified Description A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations could...

PT-2017-17220

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions 8.30CV0.833 Description A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition when an...

PT-2017-16153

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800, 2800, and 3800 Series Access Points version 8.3.102.0 Description A vulnerability in the Plug-and-Play PnP subsystem could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges due to...

PT-2017-16109

Name of the Vulnerable Software and Affected Versions Cisco Nexus 5000, 6000, and 7000 Series Switches versions 7.13N12.1 through 7.13N13.12 Cisco Nexus 5000, 6000, and 7000 Series Switches version 7.32N10.296 Cisco Nexus 5000, 6000, and 7000 Series Switches version 8.01S2 Description A...

CVE-2016-6473: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network storm. More Information: CSCuu69332, CSCux07028. Known Affected Releases: 15.23E. Known Fixed Releases: 12.250SE4 12.250SE5 12.250SQ5...