Cisco IOS and IOS XE Software IPv6 Denial of Service Vulnerability

A vulnerability in the Autonomic Networking Infrastructure ANI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incomplete input validation on certain crafted packets. An...

Cisco ANI Configuration Overwrite DoS (CSCup62167)

The remote Cisco device is affected by a vulnerability in the Autonomic Networking Infrastructure ANI due to insufficient validation of received Autonomic Networking AN messages. A remote, unauthenticated attacker, by sending specially crafted AN messages, can exploit this to overwrite...

Cisco IOS XE Autonomic Networking Infrastructure Multiple Vulnerabilities (cisco-sa-20150325-ani)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by the following vulnerabilities : - A flaw exists in the ANI due to failing to properly validate Autonomic Networking AN messages. This could allow a remote attacker to spoof an Autonomic...

Cisco IOS Autonomic Networking Infrastructure Multiple Vulnerabilities (cisco-sa-20150325-ani)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by the following vulnerabilities in the Autonomic Networking Infrastructure ANI : - A flaw exists in the ANI implementation due to failing to properly validate Autonomic Networking AN response...

Cisco IOS/IOS XE Malformed ANRA Answer Message Restriction Bypass Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. A security vulnerability exists in the Cisco IOS and Cisco IOS XE ANI implementations, which allows remote attackers to exploit the vulnerability to bypass device and node access notifications by sending spoofed ANRA response message telegrams or...

CVE-2015-0637

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service device reload via spoofed AN messages, aka Bug ID CSCup62315...

CVE-2015-0636

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service disrupted domain access via spoofed AN messages that reset a finite state machine,...

CVE-2015-0635

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority ANRA responses, and consequently bypass intended device and...

CVE-2015-0637

CVE-2015-0637 affects Cisco IOS/IOS XE ANI: the Autonomic Networking Infrastructure implementation fails to properly validate Autonomic Networking messages, allowing unauthenticated remote attackers to trigger a denial of service that reloads the device. Affected ranges include IOS 12.2, 12.4, 15...

CVE-2015-0636

The Cisco ANI issue affects the Autonomic Networking Infrastructure in Cisco IOS and IOS XE. The vulnerability allows unauthenticated remote attackers to cause Denial of Service by sending spoofed Autonomic Networking (AN) messages that reset the finite state machine, disrupting domain access. Af...

CVE-2015-0635

CVE-2015-0635 affects Cisco IOS and IOS XE ANI (Autonomic Networking Infrastructure). Affected: IOS 12.2, 12.4, 15.0–15.4 and IOS XE 3.10.xS–3.13.xS before 3.13.1S. Vulnerable component: ANI implementation handling Autonomic Networking (AN) messages/ANRA responses. Root cause: improper validation...

CVE-2015-0635

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority ANRA responses, and consequently bypass intended device and...

Code injection

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 15.4S and 15.43S allows remote attackers to modify configuration settings or cause a denial of service partial service outage by sending crafted Autonomic Networking AN messages on an intranet network, aka Bug ID CSCup62167...

CVE-2015-0669

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 15.4S and 15.43S allows remote attackers to modify configuration settings or cause a denial of service partial service outage by sending crafted Autonomic Networking AN messages on an intranet network, aka Bug ID CSCup62167...

Cisco IOS Software Autonomic Networking Infrastructure Overwrite Vulnerability

A vulnerability in the Autonomic Networking Infrastructure ANI feature of Cisco IOS software could allow an unauthenticated, remote attacker to overwrite some configuration values received via ANI. The vulnerability is due to insufficient validation of received Autonomic Networking AN messages. A...

CVE-2015-0659

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS allows remote attackers to trigger self-referential adjacencies via a crafted Autonomic Networking AN message, aka Bug ID CSCup62157...

CVE-2015-0659

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS allows remote attackers to trigger self-referential adjacencies via a crafted Autonomic Networking AN message, aka Bug ID CSCup62157...

CVE-2015-0659

CVE-2015-0659 concerns Cisco IOS Autonomic Networking Infrastructure (ANI). The ANI implementation allows remote attackers to trigger self-referential adjacencies by sending crafted Autonomic Networking (AN) messages (Bug ID CSCup62157). Affected: ANI component of Cisco IOS. Reported impact indic...

Cisco IOS XE Software Autonomic Networking Infrastructure Routing Protocol for Low-Power and Lossy Networks Vulnerability

A vulnerability in the IPv6 Routing Protocol for Low-Power and Lossy Networks RPL of Cisco IOS XE could allow an unauthenticated, adjacent attacker to inject routes into the autonomic control plane ACP. The vulnerability is due to RPL being active on ACP as well as the external Autonomic Networki...

CVE-2014-3403

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647...