EUVD-2021-21359

Malware in sbrugna...

CVE-2022-20845 Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability

A vulnerability in the TL1 function of Cisco Network Convergence System NCS 4000 Series could allow an authenticated, local attacker to cause a memory leak in the TL1 process. This vulnerability is due to TL1 not freeing memory under some conditions. An attacker could exploit this vulnerability b...

CVE-2022-20845 Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability

A vulnerability in the TL1 function of Cisco Network Convergence System NCS 4000 Series could allow an authenticated, local attacker to cause a memory leak in the TL1 process. This vulnerability is due to TL1 not freeing memory under some conditions. An attacker could exploit this vulnerability b...

CVE-2022-20845: Memory Allocation with Excessive Size Value

A vulnerability in the TL1 function of Cisco Network Convergence System NCS 4000 Series could allow an authenticated, local attacker to cause a memory leak in the TL1 process. This vulnerability is due to TL1 not freeing memory under some conditions. An attacker could exploit this vulnerability b...

CVE-2024-20317 Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability

A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network Convergence System NCS platforms could allow an unauthenticated, adjacent attacker to cause critical priority packets to be dropped, resulting in a denial of service DoS condition. This...

CVE-2024-20317: Incorrect Provision of Specified Functionality

A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network Convergence System NCS platforms could allow an unauthenticated, adjacent attacker to cause critical priority packets to be dropped, resulting in a denial of service DoS condition. This...

CVE-2021-34708: Improper Verification of Cryptographic Signature

Multiple vulnerabilities in image verification checks of Cisco Network Convergence System NCS 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for Cisco 8000 Series Routers could allow an authenticated, local attacker to execute arbitrary code ...

CVE-2021-34709: Improper Verification of Cryptographic Signature

Multiple vulnerabilities in image verification checks of Cisco Network Convergence System NCS 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for Cisco 8000 Series Routers could allow an authenticated, local attacker to execute arbitrary code ...

PT-2021-4046

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software for Cisco 8000 Series Routers affected versions not specified Cisco Network Convergence System NCS 540 Series Routers, only when running Cisco IOS XR NCS540L software images affected versions not specified Description The...

PT-2021-4141

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions affected versions not specified Cisco Network Convergence System NCS 540 Series Routers running Cisco IOS XR NCS540L software images affected versions not specified Cisco IOS XR Software for Cisco 8000 Series Routers...

PT-2021-2502

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Network Convergence System NCS 520 Routers affected versions not specified Description: A vulnerability in the ingress traffic manager could allow an unauthenticated, remote attacker to cause a denial of servic...

CVE-2021-1394: Undefined Security Weakness

A vulnerability in the ingress traffic manager of Cisco IOS XE Software for Cisco Network Convergence System NCS 520 Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the web management interface of an affected device. This vulnerability is due ...

CVE-2021-1244: Improper Verification of Cryptographic Signature

Multiple vulnerabilities in Cisco Network Convergence System NCS 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on...

CVE-2021-1136: Improper Verification of Cryptographic Signature

Multiple vulnerabilities in Cisco Network Convergence System NCS 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on...

PT-2021-1916

Name of the Vulnerable Software and Affected Versions Cisco Network Convergence System NCS 540 Series Routers versions running Cisco IOS XR NCS540L software images Cisco IOS XR Software for the Cisco 8000 Series Routers affected versions not specified Description The issue is related to multiple...

PT-2021-1962

Name of the Vulnerable Software and Affected Versions: Cisco Network Convergence System NCS 540 Series Routers versions running Cisco IOS XR NCS540L software images Cisco IOS XR Software for the Cisco 8000 Series Routers affected versions not specified Description: The issue is related to errors ...

PT-2020-4888

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers affected versions not specified Cisco Network Convergence System NCS 5000 Series Routers affected versions not specified Description: A vulnerability in the packet...

Information disclosure

A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...

CVE-2019-1681

A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...

CVE-2019-1681: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...