CVE-2015-6296

Cisco Prime Network Registrar CPNR 8.13.3, 8.23, and 8.32 has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825...

Design/Logic Flaw

The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial of service process reset via crafted packets, aka Bug ID CSCun36525...

Default credentials

Cisco Prime Network Registrar CPNR 8.13.3, 8.23, and 8.32 has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825...

CVE-2015-6296

CVE-2015-6296 affects Cisco Prime Network Registrar (CPNR) versions 8.1(3.3), 8.2(3), and 8.3(2). A default/insecure local account exists, enabling an authenticated, local attacker to obtain root privileges on the affected device. Cisco’s advisory notes that software updates are not available to ...

CVE-2015-6297

The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial of service process reset via crafted packets, aka Bug ID CSCun36525...

CVE-2015-6296

Cisco Prime Network Registrar CPNR 8.13.3, 8.23, and 8.32 has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825...

CVE-2015-6288

Cisco Content Security Management Appliance SMA 7.8.0-000 does not properly validate credentials, which allows remote attackers to cause a denial of service rapid log-file rollover and application fault via crafted HTTP requests, aka Bug ID CSCuw09620...

CVE-2015-6285

Format string vulnerability in Cisco Email Security Appliance ESA 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service memory overwrite or service outage via format string specifiers in an HTTP request, aka Bug ID CSCug21497...

Code injection

Cisco Web Security Appliance WSA 8.0.7 allows remote HTTP servers to cause a denial of service memory consumption from stale TCP connections via crafted responses, aka Bug ID CSCuw10426...

Format string

Format string vulnerability in Cisco Email Security Appliance ESA 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service memory overwrite or service outage via format string specifiers in an HTTP request, aka Bug ID CSCug21497...

Code injection

Cisco Content Security Management Appliance SMA 7.8.0-000 does not properly validate credentials, which allows remote attackers to cause a denial of service rapid log-file rollover and application fault via crafted HTTP requests, aka Bug ID CSCuw09620...

CVE-2015-6288

CVE-2015-6288 affects Cisco Content Security Management Appliance (SMA) 7.8.0-000. The issue is a web-interface vulnerability where insufficient validation of credentials for incoming HTTP requests allows unauthenticated remote attackers to trigger a denial-of-service via rapid log-file rollover,...

CVE-2015-6285

CVE-2015-6285 describes a format-string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 that can be exploited remotely by sending crafted HTTP requests to trigger a DoS (memory overwrite or service outage). The issue stems from improper handling/validation of format specifie...

CVE-2015-6285

Format string vulnerability in Cisco Email Security Appliance ESA 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service memory overwrite or service outage via format string specifiers in an HTTP request, aka Bug ID CSCug21497...

CVE-2015-6288

Cisco Content Security Management Appliance SMA 7.8.0-000 does not properly validate credentials, which allows remote attackers to cause a denial of service rapid log-file rollover and application fault via crafted HTTP requests, aka Bug ID CSCuw09620...

Cisco TelePresence Integrator C Series Authentication Bypass Vulnerability (CSCuv00604)

Cisco TelePresence Integrator C Series devices running TC Software are prone to an authentication-bypass vulnerability because it fails to sufficiently sanitize the user-supplied input. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

CVE-2015-6276

Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access control, which allows remote attackers to obtain cleartext versions of HTTPS traffic or spoof devices via a direct request to the certificate directory, aka Bug ID...

Improper access control

Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access control, which allows remote attackers to obtain cleartext versions of HTTPS traffic or spoof devices via a direct request to the certificate directory, aka Bug ID...

CVE-2015-6276

Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access control, which allows remote attackers to obtain cleartext versions of HTTPS traffic or spoof devices via a direct request to the certificate directory, aka Bug ID...

CVE-2015-6277

The ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.21SV31.4, Nexus 3000 devices 7.30ZD0.47, Nexus 4000 devices 4.12E1, Nexus 9000 devices 7.30ZD0.61, and MDS 9000 devices 7.00HSK0.353 and SAN-OS NX-OS on MDS 9000 devices 7.00HSK0.353 allows remote attackers to cause...