PT-2019-1754

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE Software affected versions not specified Description A vulnerability in the Hot Standby Router Protocol HSRP subsystem could allow an unauthenticated, adjacent attacker to receive potentially sensitive information from an...

PT-2019-1707

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A vulnerability in the Cluster Management Protocol CMP processing code could allow an unauthenticated, adjacent attacker to trigger a denial of service Do...

CVE-2019-1749: Improper Input Validation

A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router ASR 900 Route Switch Processor 3 RSP3 could allow an unauthenticated, adjacent attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The...

CVE-2019-1746: Improper Input Validation

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

CVE-2019-6540

The CVE-2019-6540 issue is concrete: the Conexus telemetry protocol used by Medtronic MyCareLink/CareLink devices and related CRT-D/ICD hardware does not encrypt communications (Cleartext Transmission of Sensitive Information) and, per ICS-CERT, can be exploited by an attacker with adjacent, shor...

PT-2019-18152

Name of the Vulnerable Software and Affected Versions Medtronic MyCareLink Monitor versions 24950 through 24952 CareLink Monitor version 2490C CareLink 2090 Programmer Amplia CRT-D Claria CRT-D Compia CRT-D Concerto CRT-D Concerto II CRT-D Consulta CRT-D Evera ICD Maximo II CRT-D and ICD Mirro IC...

CVE-2019-6538

The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro IC...

(0Day) (Pwn2Own) Xiaomi Mi6 Captive Portal Whitelist Bypass Remote Code Execution Vulnerability

This vulnerability allows network adjacent attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6. User interaction is required to exploit this vulnerability in that the target must connect to a malicious access point. The specific flaw exists within the handling of...

CVE-2019-1617

Cisco NX-OS Software on Nexus 9000 Series Switches in Standalone NX-OS Mode is affected by CVE-2019-1617. The issue stems from incorrect processing of FCoE packets when the fcoe-npv feature is uninstalled, enabling an unauthenticated adjacent attacker to cause a denial of service by sending a str...

CVE-2019-1690

A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller APIC software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6...

CVE-2019-1690: Improper Access Control

A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller APIC software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6...

CVE-2019-1594: Improper Input Validation

A vulnerability in the 802.1X implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incomplete input validation of Extensible Authentication Protocol over LAN EAPOL...

CVE-2019-1595: Improper Control of Dynamically-Managed Code Resources

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to an incorrect allocation of an internal interface...

PT-2019-1576

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to 7.35N11 Description The issue is related to an incorrect allocation of an internal interface index in the Fibre Channel over Ethernet FCoE protocol implementation. This could allow an unauthenticated,...

PT-2019-1569

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V Switch for VMware vSphere versions prior to 5.21SV31.4b Cisco Nexus 3000 Series Switches versions prior to 7.03I74 Cisco Nexus 3500 Platform Switches versions prior to 7.03I74 Cisco Nexus 2000, 5500, 5600, and 6000 Series...

Race condition

A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol LLDP implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS...

CVE-2019-1684 Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol and Link Layer Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol LLDP implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS...

CVE-2019-1700: Undefined Security Weakness

A vulnerability in field-programmable gate array FPGA ingress buffer management for the Cisco Firepower 9000 Series with the Cisco Firepower 2-port 100G double-width network module PID: FPR9K-DNM-2X100G could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition...

CVE-2019-1684: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol LLDP implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS...

CVE-2018-15380 Cisco HyperFlex Software Command Injection Vulnerability

A vulnerability in the cluster service manager of Cisco HyperFlex Software could allow an unauthenticated, adjacent attacker to execute commands as the root user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by connecting to the cluster...