Cisco Web Security Appliance (WSA) GUI Denial of Service Vulnerability

According to its self-reported version, the Cisco Web Security Appliance is affected by a Denial of Service vulnerability. The vulnerability is due to improper validation of specific HTTP request headers. An attacker could exploit this vulnerability by sending a malformed HTTP request to an...

Cisco Email Security Appliance (ESA) GUI Denial of Service Vulnerability

According to its self-reported version, the Cisco Email Security Appliance ESA is affected by a Denial of Service vulnerability. The vulnerability is due to improper validation of specific HTTP request headers. An attacker could exploit this vulnerability by sending a malformed HTTP request to an...

Cisco UCS Manager Software CLI Command Injection (cisco-sa-20200226-fxos-ucs-cmdinj)

According to its self-reported version, Cisco UCS Manager Software is affected by a vulnerability in the CLI due to insufficient input validation. An authenticated, local attacker can exploit this, by including crafted arguments to specific commands, in order to execute arbitrary commands on the...

Cisco FXOS Software CLI Command Injection (cisco-sa-20200226-fxos-ucs-cmdinj)

According to its self-reported version, Cisco FXOS Software is affected by a vulnerability in the CLI due to insufficient input validation. An authenticated, local attacker can exploit this, by including crafted arguments to specific commands, in order to execute arbitrary commands on the...

Cisco FXOS Software Pluggable Authentication Module DoS (cisco-sa-20191002-ftd-fpmc-dos)

According to its self-reported version, Cisco FXOS Software is affected by a vulnerability in the configuration of the Pluggable Authentication Module PAM due to improper resource management in the context of user session management. An authenticated, remote attacker can exploit this, by connecti...

Cisco IOS XR Software IPsec Packet Processor DoS (cisco-sa-iosxr-ipsec-dos-q8UPX6m)

According to its self-reported version, Cisco IOS XR Software is affected by a denial of service DoS vulnerability in the IPsec packet processor due to improper handling of packets. An unauthenticated, remote attacker can exploit this, by sending malicious ICMP error messages to an affected devic...

Cisco FXOS Software Cisco Discovery Protocol Arbitrary Code Execution and DoS (cisco-sa-20200226-fxos-nxos-cdp)

According to its self-reported version, Cisco FXOS Software is affected by a vulnerability in the Cisco Discovery Protocol feature due to insufficient validation of Cisco Discovery Protocol packet headers. An unauthenticated, adjacent attacker can exploit this, by sending a crafted Cisco Discover...

Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability (cisco-sa-20200226-nxos-arp)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco FXOS Software CLI Command Injection Vulnerability (cisco-sa-20200226-fpwr-cmdinj)

According to its self-reported version, Cisco Firepower Extensible Operating System FXOS is affected by a command injection vulnerability in its command line interface component due to insufficient validation of arguments passed to a specific command. An authenticated, local attacker can exploit...

Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability (cisco-sa-20190501-apic-xss)

According to its self-reported version, Cisco Application Policy Infrastructure Controller APIC is affected by following vulnerability - A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker t...

Cisco IOS XR Software Secure Shell Authentication Vulnerability (cisco-sa-20190605-iosxr-ssh)

According to its self-reported version, Cisco IOS XR Software is affected by a vulnerability in the Secure Shell SSH authentication function of Cisco IOS XR Software that could allow an authenticated, remote attacker to successfully log in to an affected device using two distinct usernames. The...

Cisco IOS XR Software NETCONF Over Secure Shell ACL Bypass (cisco-sa-20191120-iosxr-ssh-bypass)

According to its self-reported version, Cisco IOS XR Software is affected by a vulnerability in the access-control logic of the NETCONF over Secure Shell SSH due to a missing check in the NETCONF over SSH access control list ACL. An unauthenticated, remote attacker can exploit this, by by...

Cisco IOS XR Software for Cisco ASR 9000 VMAN CLI Privilege Escalation (cisco-sa-20190925-xr-asr9k-privesc)

According to its self-reported version, Cisco IOS XR Software is affected by a privilege escalation vulnerability in a CLI command related to the virtualization manager VMAN for Cisco ASR 9000 Series Aggregation Services Routers. This is due to insufficient validation of arguments passed to a...

Cisco Aggregation Services Router 9000 Series IPv6 Fragment Header DoS (cisco-sa-20180131-ipv6)

According to its self-reported version, Cisco IOS XR Software is affected by a denial of service DoS vulnerability in the IPv6 subsystem due to incorrect handling of IPv6 packets with a fragment header extension. An unauthenticated, remote attacker can exploit this, by sending IPv6 packets design...

Cisco NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability (cisco-sa-20200205-fxnxos-iosxr-cdp-dos)

According to its self-reported version, the Cisco NX-OS Software is affected by a denial of service vulnerability within the Cisco Discovery Protocol due to missing a check when processing protocol messages. An unauthenticated, adjacent attacker can exploit this to cause the device to reboot...

Cisco IOS XE Software SM-1T3/E3 Service Module DoS (cisco-sa-20180926-sm1t3e3)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the SM-1T3/E3 firmware due to improper handling of user input. A remote, unauthenticated attacker can exploit this, by first connecting to the SM-1T3/E3 module console and enterin...

Cisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass (cisco-sa-iptable-bypass-GxW88XjL)

According to its self-reported version, Cisco Application Policy Infrastructure Controller APIC is affected by a vulnerability in the out of band OOB management interface IP table rule programming. This is due to the configuration of specific IP table entries for which there is a programming logi...

Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability (cisco-sa-ucm-csrf-NbhZTxL)

According to its self-reported version, Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected device. This is due to due to insufficient CSRF protections. An attacker could exploit this vulnerability...

Cisco IOS XR Software Border Gateway Protocol DoS (cisco-sa-20181003-iosxr-dos)

According to its self-reported version, Cisco IOS XR Software is affected by a denial of service DoS vulnerability in its implementation of the Border Gateway Protocol BGP. This is due to incorrect processing of certain BGP update messages. An unauthenticated, remote attacker can exploit this, by...

Cisco ASR 9000 Series Aggregation Services Routers Precision Time Protocol DoS (cisco-sa-20180815-asr-ptp-dos)

According to its self-reported version, Cisco IOS XR Software is affected by a denial of service DoS vulnerability in the Local Packet Transport Services LPTS feature set of Cisco ASR 9000 Series Aggregation Services Routers. This is due to a lack of input and validation checking on certain...