CVE-2015-4195

Cisco IOS XR 5.1.1.K9SEC is affected by CVE-2015-4195 where an authenticated remote attacker can trigger a denial of service by crafting an SSH disconnect action, making the vty inaccessible and causing SSH/Telnet outages. The root cause is an error in SSH disconnect handling. Cisco has published...

CVE-2015-4183

Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...

Input validation

The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience aka VXC Client 6215 devices with firmware 11.227.4 allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412...

Code injection

Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vectors, aka Bug ID CSCuh19683...

Command injection

Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...

CVE-2015-4183

Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...

CVE-2015-4190

Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vectors, aka Bug ID CSCuh19683...

Design/Logic Flaw

The TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows local users to gain privileges by starting a session very soon after a TCL script execution, aka Bug ID CSCuq24202...

CVE-2015-4185

The TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows local users to gain privileges by starting a session very soon after a TCL script execution, aka Bug ID CSCuq24202...

CVE-2015-0776

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

CVE-2015-0769

Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS X8.5RC4 allows remote attackers to cause a denial of service CPU consumption or device outage via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422...

Design/Logic Flaw

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

Design/Logic Flaw

The administrative web interface in Cisco Identity Services Engine ISE before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or change settings, via unspecified vectors, aka Bug ID CSCui72087...

Code injection

Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...

CVE-2015-0769

Cisco IOS XR Software on CRS-3 (versions 4.0.1–4.2.0) contains a vulnerability in IPv6 processing that can be exploited remotely by sending crafted IPv6 extension headers. An unauthenticated attacker could trigger an ASIC scan of the Network Processor Unit (NPU) and cause a line-card reload, resu...

CVE-2015-0772

Cisco TelePresence Video Communication Server VCS X8.5RC4 allows remote attackers to cause a denial of service CPU consumption or device outage via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422...

CVE-2015-0769

Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...

CVE-2015-0773

Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Application and Content Networking System ACNS 5.59 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu70650...