CVE-2014-2124

CVE-2014-2124 affects Cisco IOS 15.1(2)SY3 and earlier on Catalyst 6500 with Supervisor Engine 2T (Sup2T). The root cause is incorrect processing of multicast traffic by the Sup2T, allowing remote attackers to cause a denial of service (device crash). Cisco’s advisory confirms the vulnerability a...

CVE-2014-0708

CVE-2014-0708 affects WebEx Meeting Center in Cisco WebEx Business Suite. The issue arises from improper URL composition for HTTP GET requests, which could allow remote attackers to read sensitive data from server access logs, Referer logs, or a browser history (Bug ID CSCul98272). Root cause: in...

CVE-2014-2120

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025...

CVE-2014-2120

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025...

CVE-2014-2122

Cisco Hosted Collaboration Solution (HCS) Impack server GUI contains a memory leak vulnerability that can cause DoS via remote, unauthenticated access. The issue stems from improper packet processing, enabling memory exhaustion on the GUI. Exploitation may require access to trusted internal netwo...

CVE-2014-2120

CVE-2014-2120 affects Cisco ASA WebVPN login page, with a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via an unspecified parameter (Bug ID CSCun19025). Multiple sources (Cisco advisory, NVD/NIST CVE entry, CISCO-SA, OpenVAS) consistently d...

CVE-2014-2120

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...

Cisco IPS MainApp SNMP DoS (CSCul49309)

A vulnerability in Cisco IPS Software could allow an unauthenticated, remote attacker to cause the MainApp to hang intermittently due to improper handling of SNMP packets sent to the management interface. Note that, in order to for the remote host to be affected by this issue, SNMP must be enable...

CVE-2014-0701

Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...

CVE-2014-0706

Cisco Wireless LAN Controller WLC devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service device restart via a crafted 802.11 Ethernet frame, aka Bug ID CSCue87929...

CVE-2014-0703

Cisco Wireless LAN Controller WLC devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server...

Design/Logic Flaw

The IGMP implementation on Cisco Wireless LAN Controller WLC devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service memory over-read and device restart via a crafted field in an IGMPv3 message, aka Bug ...

Design/Logic Flaw

The multicast listener discovery MLD service on Cisco Wireless LAN Controller WLC devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service device restart via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233...

Command injection

Cisco Wireless LAN Controller WLC devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service device restart via a crafted 802.11 Ethernet frame, aka Bug ID CSCue87929...

Race condition

Cisco Wireless LAN Controller WLC devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server...

CVE-2014-0703

Cisco WLC devices running 7.4 before 7.4.110.0 distribute Aironet IOS software that contains a race condition in the status of the administrative HTTP server. This allows remote attackers to bypass access restrictions by connecting to an Aironet AP where the server was disabled ineffectively. The...

CVE-2014-0701

Cisco WLCs are affected by CVE-2014-0701: memory not properly deallocated during WebAuth login handling, enabling remote attackers to cause a DoS reboot by sending WebAuth requests at high rate. Affected versions include 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0. The issue is tied ...

CVE-2014-0707

CVE-2014-0707 affects Cisco Wireless LAN Controller (WLC) devices in versions 7.2, 7.3, and 7.4 prior to 7.4.110.0. The vulnerability allows remote attackers to cause a denial of service (device restart) by sending a crafted 802.11 Ethernet frame. Root cause is related to how WLC handles these fr...

CVE-2014-0704

The IGMP implementation on Cisco Wireless LAN Controller WLC devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service memory over-read and device restart via a crafted field in an IGMPv3 message, aka Bug ...