Design/Logic Flaw

The Intrusion Prevention System IPS feature in Cisco IOS 12.3 through 12.4 and 15.0 through 15.2, in certain configurations of enabled categories and missing signatures, allows remote attackers to cause a denial of service device reload via DNS packets, aka Bug ID CSCtw55976...

Code injection

The NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of service device reload via transit IP packets, aka Bug ID CSCtr46123...

CVE-2012-4621

The Device Sensor feature in Cisco IOS 15.0 through 15.2 allows remote attackers to cause a denial of service device reload via a DHCP packet, aka Bug ID CSCty96049...

CVE-2012-3950

CVE-2012-3950 affects Cisco IOS Software’s Intrusion Prevention System (IPS) in IOS versions 12.3–12.4 and 15.0–15.2. In certain enabled-category configurations with missing signatures, a remote, unauthenticated attacker can cause a denial-of-service by sending DNS packets, potentially reloading ...

CVE-2012-4618

The SIP ALG feature in the NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of service device reload via transit IP packets, aka Bug ID CSCtn76183...

CVE-2012-4621

CVE-2012-4621 affects Cisco IOS 15.0–15.2 via the Device Sensor feature. A remote unauthenticated attacker can cause a DoS leading to a device reload by sending a single DHCP packet, per Bug ID CSCty96049. This is a network-based DoS vulnerability observed in Cisco IOS Software, with Cisco adviso...

Cisco IOS NAT功能拒绝服务漏洞(CVE-2012-4618)

BUGTRAQ ID: 55693 CVE ID: CVE-2012-4618 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。NAT SIP ALG功能可通过IP报文的SIP负载内嵌入的IP地址转换，根据SIP部署VoIP解决方案之间的Cisco IOS NAT， Cisco IOS在启用了NAT SIP ALG功能处理SIP报文时存在安全漏洞，NAT SIP ALG是默认启用的并执行了IP报文的SIP负载转换。默认是对UDP端口5060报文转换NAT SIP。该端口使用全局配置命令"ip nat service sip udp port"配置。...

CVE-2012-3923

The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service device crash via a session involving a PPP over ATM PPPoA interface, aka...

CVE-2012-3924

The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service device crash via a session involving a PPP over ATM PPPoA interface, aka Bug ID CSCty97961...

CVE-2012-3908

Multiple cross-site request forgery CSRF vulnerabilities in the ISE Administrator user interface aka the Apache Tomcat interface on Cisco Identity Services Engine ISE 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators,...

CVE-2012-3079

Cisco IOS 12.2 allows remote attackers to cause a denial of service CPU consumption by establishing many IPv6 neighbors, aka Bug ID CSCtn78957...

CVE-2012-3088

Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166...

CVE-2012-3895

Cisco IOS 15.0 through 15.3 allows remote authenticated users to cause a denial of service device crash via an MVPNv6 update, aka Bug ID CSCty89224...

CVE-2012-3060

Cisco Unity Connection UC 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service CPU consumption via malformed UDP packets, aka Bug ID CSCtz76269...

CVE-2012-3094

The VPN downloader in the downloadinstall component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without user interaction, which allows remote attackers to obtain sensitive information via vectors involving an invalid...

CVE-2012-3901

The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service process crash and traffic-inspection outage via network traffic, aka Bug ID CSCta96144...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the ISE Administrator user interface aka the Apache Tomcat interface on Cisco Identity Services Engine ISE 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators,...

Memory corruption

sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service memory corruption and process crash, and traffic-inspection outage via network traffic, aka Bug ID CSCtn23051...

Code injection

Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service process crash or packet loss via a large number of ARP packets, aka Bug ID CSCtr44822...

Code injection

The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service spoke crash via spoke-to-spoke traffic, aka Bug ID CSCtz02622...