EUVD-2017-12970

Malware in sbrugna...

Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Image Verification Bypass (cisco-sa-ios-ir800-img-verif-wHhLYHjK)

According to its self-reported version, IOS is affected by a vulnerability. The vulnerability is due to insufficient access restrictions on the area of code that manages the image verification feature. A successful exploit could allow the attacker to boot a malicious Cisco IOS Software image on t...

Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write (cisco-sa-20180926-ir800-memwrite)

According to its self-reported version, Cisco IOS is affected by arbitrary memory write vulnerabilities in the embedded test subsystem due to the presence of certain test commands that were intended to be available only in internal development builds of the affected software. An authenticated,...

CVE-2018-15376

CVE-2018-15376 affects Cisco IOS Software on Cisco 800 Series Industrial Integrated Services Routers. The flaw resides in the embedded test subsystem and allows an authenticated, local attacker to write arbitrary values to arbitrary memory locations by using certain test commands intended for int...

CVE-2018-15375

CVE-2018-15375 affects Cisco IOS Software on Cisco 800 Series Industrial Integrated Services Routers. The vulnerability lies in the embedded test subsystem: presence of test commands intended for internal development builds allows an authenticated, local attacker to write arbitrary values to arbi...

CVE-2017-3853

CVE-2017-3853 affects Cisco IOx Data-in-Motion (DMo) in Cisco IOx on 800 Series routers (IR809/IR829). The issue is a stack overflow in the DMo process due to insufficient bounds checking, allowing an unauthenticated, remote attacker to cause remote code execution with root privileges within the ...

Cisco Router Web Setup (CRWS) contains an insecure default IOS configuration

Overview A vulnerability in the Cisco Router Web Setup CRWS web configuration tool on some Cisco 800 and SOHO series routers may allow remote execution of system-level commands with no authentication. Description Cisco Router Web Setup Tool The Cisco Router Web Setup tool, or CRWS, provides a GUI...