Authentication flaw

The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated users to cause a denial of service module reload via a series of malformed packets, aka Bug ID CSCub92025...

CVE-2013-1241

The CVE-2013-1241 issue is a Cisco IOS ISM module DoS on ISR G2 routers caused by improper processing of authentication-header packets. An authenticated remote attacker can trigger a module reload by sending malformed authentication-header packets, impacting IPsec traffic. Cisco has published a s...

CVE-2013-1235

Cisco Wireless LAN Controller WLC devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service TELNET outage by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507...

CVE-2013-1240

The command-line interface in Cisco Unified Communications Manager CUCM does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25770...

Code injection

Cisco Wireless LAN Controller WLC devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service TELNET outage by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507...

Design/Logic Flaw

The command-line interface in Cisco Unified Communications Manager CUCM does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25770...

CVE-2013-1235

Cisco Wireless LAN Controller WLC devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service TELNET outage by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507...

CVE-2013-1240

The Cisco Unified Communications Manager (CUCM) CLI vulnerability arises from incomplete input validation in the command-line interface. It enables a local, authenticated attacker to read arbitrary files on the device by issuing a crafted command. The exploit requires local access; no public expl...

CVE-2013-1240

The command-line interface in Cisco Unified Communications Manager CUCM does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25770...

CVE-2013-1235

CVE-2013-1235 affects Cisco Wireless LAN Controller (WLC) software. The issue is the improper cleanup of terminated remote Telnet sessions, allowing an unauthenticated, remote attacker to exhaust Telnet resources and cause a denial of service (Telnet outage) by opening many Telnet connections and...

Code injection

The SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service process restart via crafted SNMP packets, aka Bug ID CSCue69472...

CVE-2013-1234

The SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service process restart via crafted SNMP packets, aka Bug ID CSCue69472...

CVE-2013-1234

CVE-2013-1234 describes a denial-of-service vulnerability in the SNMP module of Cisco IOS XR. The issue arises from improper handling of crafted SNMP packets, allowing remote, authenticated attackers to cause the SNMP process to restart (Bug CSCue69472). Affected product: Cisco IOS XR Software wi...

CVE-2013-1229

TMSSNMPService.exe in TelePresence Manager in Cisco TelePresence Management Suite TMS on 64-bit platforms allows remote attackers to cause a denial of service process crash via SNMP traps, aka Bug ID CSCue00028...

CVE-2013-1156

Directory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to read arbitrary files via a crafted URL, aka Bug ID CSCud51034...

CVE-2013-1157

Cross-site scripting XSS vulnerability in the IBM Tivoli Monitoring ITM Java servlet container in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud51068...

CVE-2013-1158

Cross-site scripting XSS vulnerability in the IBM Tivoli Monitoring ITM help menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud54397...

CVE-2013-1160

Cross-site scripting XSS vulnerability in the OpenView web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56743...

CVE-2013-1159

Cross-site scripting XSS vulnerability in the Netcool Impact NCI web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56706...

Cross site scripting

Cross-site scripting XSS vulnerability in the Netcool Impact NCI web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56706...