Lucene search
+L

339 matches found

BDU FSTEC
BDU FSTEC
added 2022/07/01 12:00 a.m.12 views

The vulnerability of the Internet Key Exchange version 2 (IKEv2) function in Cisco IOS operating systems allows a hacker to induce a service failure.

The vulnerability of the Internet Key Exchange version 2 IKEv2 module in Cisco IOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

8.6CVSS7.5AI score0.07237EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:00 a.m.13 views

The vulnerability affects the implementation of the Control Point Access Point Wireless Provisioning Protocol (CAPWAP) on Cisco IOS XE operating systems, as well as Control Points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers. This allows a malicious actor to cause service interruptions.

The vulnerability of the CAPWAP protocol implementation in Cisco IOS XE operating systems, as well as in Catalyst access points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers, is related to an unvalidated return value that causes the zero pointer to be swapped...

8.6CVSS6.5AI score0.01325EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/23 12:00 a.m.13 views

The vulnerability in the packet management subsystem of the Remote Package Manager (RPM) of the Cisco IOS XR network operating system for Cisco 8000 series routers allows a attacker to access the Redis database running on the NOSi container.

The vulnerability of the package management subsystem of the Remote Package Manager RPM in Cisco IOS XR network operating systems for Cisco 8000 series routers is related to the exposure of protected information. Exploiting this vulnerability could allow an attacker to gain access to the Redis...

6.5CVSS5.5AI score0.12094EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:00 a.m.11 views

The vulnerability of the TCL-script interpreter (Tool Command Language) of the Cisco IOS XE operating system, which allows attackers to escalate their privileges.

The vulnerability of the TCL-script interpreter of the Cisco IOS XE operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

5.2CVSS6.2AI score0.00279EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/04/13 12:00 a.m.10 views

Cisco IOS XE 路径遍历漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE. An attacker exploited the...

9CVSS7.2AI score0.01987EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2022/04/13 12:00 a.m.10 views

Cisco IOS XE Software 操作系统命令注入漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. An operating system command injection vulnerability exists in Cisco IOS XE. Multiple...

9CVSS7.2AI score0.02201EPSS
SaveExploits1References5
VulnCheck KEV
VulnCheck KEV
added 2022/03/03 12:00 a.m.6 views

VulnCheck KEV: CVE-2017-12238

A vulnerability in the Virtual Private LAN Service VPLS code of Cisco IOS for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a denial of service...

6.5CVSS6.6AI score0.02034EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2022/03/03 12:00 a.m.7 views

VulnCheck KEV: CVE-2017-12235

A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol PN-DCP for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service...

7.8CVSS7.1AI score0.07128EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2022/03/03 12:00 a.m.16 views

VulnCheck KEV: CVE-2017-12233

There is a vulnerability in the implementation of the Common Industrial Protocol CIP feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service...

7.8CVSS7.1AI score0.07128EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:00 a.m.15 views

The vulnerability in the implementation of the Control Point and Wireless Access Point Provisioning Protocol (CAPWAP) of the Cisco IOS XE operating system allows a attacker to trigger a service failure.

The vulnerability of the CAPWAP management protocol implementation and wireless access point provisioning in Cisco IOS XE operating systems is related to insufficient validation of CAPWAP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

8.6CVSS7.2AI score0.0139EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/15 12:00 a.m.15 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco IOS and Cisco IOS XE operating systems is related to initialization errors. Exploiting this vulnerability allows a malicious actor to cause service failures through the command line interface or by sending special...

6.8CVSS6.5AI score0.01187EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
added 2021/10/06 12:00 a.m.12 views

Cisco AsyncOS for Cisco Email Security Appliance 输入验证错误漏洞

The Cisco Email Security Appliance ESA and Cisco AsyncOS are both products of Cisco, Inc.The Cisco Email Security Appliance is an email security appliance.The Cisco AsyncOS is an operating system for Cisco devices. Cisco AsyncOS is an operating system for Cisco devices. An input validation error...

5.8CVSS5.8AI score0.01067EPSS
SaveExploits0References6
OSV
OSV
added 2021/09/23 3:15 a.m.9 views

CVE-2021-1620

A vulnerability in the Internet Key Exchange Version 2 IKEv2 support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to exhaust the free IP addresses from the assigned local pool. This vulnerability occurs because the cod...

7.7CVSS7.1AI score0.01069EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/09/23 12:00 a.m.8 views

The vulnerability of the Cisco IOS XR operating system, related to resource management errors, allows a attacker to reboot the compromised line card.

The vulnerability of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause a reboot of the affected line card by sending certain types of Ethernet frames to the segment connected to the affected line cards...

7.4CVSS7.2AI score0.0036EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/09/22 4:00 p.m.5 views

CVE-2021-34705

A vulnerability in the Voice Telephony Service Provider VTSP service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured destination patterns and dial arbitrary numbers. This vulnerability is due to insufficient validation of dial...

5.3CVSS6.3AI score0.01006EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/09/22 12:00 a.m.12 views

多款Cisco产品资源管理错误漏洞

Cisco IOS and others are products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.IOS XE is a set of operating systems developed for its network devices.SD-WAN Software is one of the software-defined WAN software.Cisco IOS XE Software is an operating system...

8.6CVSS8AI score0.00978EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/09/22 12:00 a.m.9 views

Cisco IOS XE Software 代码问题漏洞

Cisco IOS XE Software is an operating system from the U.S. company Cisco Cisco. A single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity.A denial-of-service vulnerability exists in Cisco IOS XE Software tha...

8.6CVSS7.8AI score0.01328EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/09/22 12:00 a.m.12 views

Cisco IOS XE Software 安全漏洞

Cisco IOS and Cisco IOS XE Software are both products of the U.S. company Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is an operating system. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN,...

6.8CVSS6.6AI score0.01187EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:00 a.m.11 views

The vulnerability of the implementation of the Resource Public Key Infrastructure (RPKI) function in the Cisco IOS XR operating system allows a perpetrator to cause a failure in the Border Gateway Protocol (BGP) process.

The vulnerability of the Resource Public Key Infrastructure RPKI function in the Cisco IOS XR operating system is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause failures in the Border Gateway Protocol BGP process...

6.8CVSS5.5AI score0.00805EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/09/08 12:00 a.m.10 views

Cisco IOS XR 操作系统命令注入漏洞

Cisco IOS XR Software is an operating system developed by Cisco for its network devices.An elevation of privilege vulnerability exists in Cisco IOS XR Software, which could be exploited by attackers to elevate the privileges of affected devices...

7.8CVSS5.6AI score0.00301EPSS
SaveExploits0References9
Rows per page
Query Builder