Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service device reload via a high volume of SIP traffic, aka Bug ID CSCsr65901...

Memory corruption

Memory leak on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service memory consumption via Subject Alternative Name fields in an X.509 certificate, aka Bug ID CSCsq17879...

CVE-2009-4917

Cisco ASA 5580 series devices running software before 8.1(2) are affected by CVE-2009-4917, a vulnerability that allows remote attackers to cause a denial of service (device reload) by sending a high volume of SIP traffic (Bug ID CSCsr65901). The issue is described as an unspecified vulnerability...

CVE-2009-4923

Unspecified vulnerability in the DTLS implementation on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service traceback via TLS fragments, aka Bug ID CSCso53162...

CVE-2009-4910

CVE-2009-4910 is an XSS vulnerability in the WebVPN portal of Cisco ASA 5580 series devices running software before 8.1(2) (Bug ID CSCsq78418). It allows remote attackers to inject arbitrary web script/HTML via unspecified vectors. Documented impact is limited to the browser-based context; no exp...

CVE-2009-4912

CVE-2009-4912 (Cisco ASA 5580) affects ASA 5580 series with software before 8.1(2). The issue allows an SSL handshake with an HTTPS client that is unauthorized to complete, potentially bypassing intended access restrictions during an HTTPS session (Bug ID CSCso10876). The cited details indicate t...

CVE-2010-0596

Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain...

CVE-2010-0598

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attacker...

Design/Logic Flaw

Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain...

Default credentials

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...

Code injection

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt XML RPC sessions from operator workstations, which allows remote...

Design/Logic Flaw

Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the...

CVE-2010-0596

CVE-2010-0596 affects Cisco Network Building Mediator (NBM) and legacy Richards‑Zeta Mediator 2500 environments running Mediator Framework releases prior to 3.1.1. Affects NBM-2400/NBM-4800 and Mediator Framework components; described vulnerability allows remote authenticated users to read or mod...

CVE-2010-0595

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...

CVE-2010-0597

Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the...

CVE-2010-0599

CVE-2010-0599 affects Cisco Network Building Mediator (NBM) families: Mediator Framework on NBM-2400/4800 and Richards-Zeta Mediator 2500. Root cause: XML-RPC sessions from operator workstations were not encrypted, enabling remote attackers to sniff credentials (admin credentials). Impact: unauth...

CVE-2010-0598

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attacker...

CVE-2010-0597

CVE-2010-0597 affects Cisco Network Building Mediator (NBM) products via the Mediator Framework. Vulnerable are Cisco NBM-2400/4800 and Richards‑Zeta Mediator 2500 firmware releases: Mediator Framework 1.5.x before 1.5.1.build.14-eng, 2.2.x before 2.2.1.dev.1, and 3.0.x before 3.0.9.release.1. An...

CVE-2010-0596

Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain...

CVE-2010-0604

Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S10 allows remote attackers to cause a denial of service device crash via unknown SIP traffic, as demonstrated by "SIP testing," aka Bug ID CSCsk38165...