Cisco NX-OS Precision Time Protocol (PTP) Denial of Service Vulnerability

According to its self-reported version, the Cisco NX-OS Software is affected by a denial of service DoS vulnerability which exists in its Precision Time Protocol PTP implementation due to a lack of protection against PTP frame flood attacks. An unauthenticated, remote attacker can exploit this...

Cisco NX-OS Software Remote Management Memory Leak Denial of Service Vulnerability (CVE-2019-1965)

According to its self-reported version, Cisco NX-OS Software is affected by vulnerability in the Virtual Shell VSH session management which could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that...

Cisco Firepower Threat Defense Software Information Disclosure Vulnerability

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability in the application policy configuration of the Cisco Firepower Threat Defense FTD Software, which could allow an unauthenticated, remote attacker to gain unauthorized read access to...

Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability (cisco-sa-20190816-ftd-http)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability in the HTTP traffic filtering component due to improper handling of HTTP requests. An attacker may exploit this vulnerability by sending malicious requests to an affected device, which...

Cisco IOS XE Software Short Message Service Denial of Service Vulnerability

According to its self-reported version, the installed Cisco IOS XE Software is affected by a vulnerability in its implementation of the Short Message Service SMS handling functionality. This allows an unauthenticated, remote attacker to trigger a denial of service DoS condition on an affected...

Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1791)

According to its self-reported version, Cisco NX-OS Software is affected by vulnerability in the CLI of Cisco NX-OS Software which allow an authenticated, local attacker with administrator credentials to execute arbitrary commands with elevated privileges on the underlying operating system of an...

Cisco IOS XE Software Privilege Escalation Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the web UI of Cisco IOS XE Software, which could allow an authenticated but unprivileged level 1, remote attacker to run privileged Cisco IOS commands by using the web UI.The vulnerability is due to a...

Cisco IOS XE Software Command Injection Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability that could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges.The vulnerability occurs because the affected software...

Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XE Software is affected by following vulnerability - A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to...

Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XR Software is affected by multiple vulnerabilities: - A vulnerability in the implementation of the Intermediate System-to-Intermediate System IS-IS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker wh...

Cisco FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability (cisco-sa-20190710-asa-ftd-dos)

According to its self-reported version, Adaptive Security Appliance Software with FirePOWER Services is affected by a vulnerability in the cryptographic driver due to incomplete input validation of a Secure Sockets Layer SSL or Transport Layer Security TLS ingress packet header. An unauthenticate...

Cisco Firepower Management Center 6.2.3.x < 6.2.3.14 / 6.3.0.x < 6.3.0.4 / 6.4.0.x < 6.4.0.2 XSS (cisco-sa-20190703-fmc-xss)

According to its self-reported version, Cisco Firepower Management Center is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information C Tenable Network Security, Inc. include'compat.inc'; if description scriptid127121;...

Cisco NX-OS Software Bash Shell Privilege Escalation Vulnerability

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level to root. The attacker must authenticate with valid user credentials...

Cisco NX-OS Software Unauthorized Filesystem Access Vulnerability

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to gain read and write access to a critical configuration file. The vulnerability is due to a failure to...

Cisco IOS Software Network Plug-and-Play Agent Certificate Validation Vulnerability

According to its self-reported version, the installed Cisco IOS software is affected by a vulnerability in the Cisco Network Plug-and-Play PnP agent. This vulnerability allows an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability exists because the...

Cisco NX-OS Software Python Parser Privilege Escalation Vulnerability

A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of user-supplied...

Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerabilities

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command...

Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by following vulnerability - A vulnerability in the detection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access control...

Cisco Firepower Threat Defense Software SSL/TLS Policy Bypass Vulnerability

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by following vulnerability - A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS protocol parser of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remo...

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1606)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device.The vulnerability is due to insufficie...