Cisco Email Security Appliance Content Filter Bypass Vulnerability (CSCvq66135)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by an input-validation flaw related to the email message filtering feature that allows further attacks by allowing malicious content to pass through the device. Please see the included Cisco BID and Cisco...

Cisco Email Security Appliance Denial of Service Vulnerability (CSCvo89192)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by an input-validation flaw related to the email message filtering feature that allows denial of service attacks. Please see the included Cisco BID and Cisco Security Advisory for more information TRUSTED...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. The...

Cisco NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability (cisco-sa-20200205-fxnxos-iosxr-cdp-dos)

According to its self-reported version, the Cisco NX-OS Software is affected by a denial of service vulnerability within the Cisco Discovery Protocol due to missing a check when processing protocol messages. An unauthenticated, adjacent attacker can exploit this to cause the device to reboot...

Cisco TelePresence Endpoint Software Path Traversal (cisco-sa-telepresence-path-tr-wdrnYEZZ)

According to its self-reported version, the Cisco TelePresence Codec TC and Collaboration Endpoint CE Cisco TelePresence Software is affected by a directory traversal vulnerability. An authenticated, remote attacker can exploit this vulnerability in order to read and write arbitrary files on the...

Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability (cisco-sa-ucm-csrf-NbhZTxL)

According to its self-reported version, Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected device. This is due to due to insufficient CSRF protections. An attacker could exploit this vulnerability...

Cisco ASR 9000 Series Aggregation Services Routers Precision Time Protocol DoS (cisco-sa-20180815-asr-ptp-dos)

According to its self-reported version, Cisco IOS XR Software is affected by a denial of service DoS vulnerability in the Local Packet Transport Services LPTS feature set of Cisco ASR 9000 Series Aggregation Services Routers. This is due to a lack of input and validation checking on certain...

Cisco IOS XE Software Web UI Cross-Site Request Forgery (cisco-sa-20200108-ios-csrf)

According to its self-reported version, Cisco IOS XE Software is affected by a cross-site request forgery CSRF vulnerability in the web UI due to insufficient CSRF protections. An unauthenticated, remote attacker can exploit this, by persuading a user of the interface to follow a malicious link, ...

Cisco Nexus 9000 Series Fabric Switches ACI Mode Border Leaf Endpoint Learning (cisco-sa-20190828-nexus-aci-dos)

According to its self-reported version, Cisco NX-OS System Software in Application Centric Infrastructure ACI mode is affected by a vulnerability within the Endpoint Learning feature of Cisco 9000 Series Switches due to improper endpoint learning when packets are received on a specific port from...

Cisco IOS Forwarding Information Base DoS (cisco-sa-20180328-FIB-dos)

According to its self-reported version, Cisco IOS is affected by a denial of service DoS vulnerability in the Forwarding Information Base code due to a limitation in the way the FIB is internally representing recursive routes. An unauthenticated, network attacker can exploit this, by injecting...

Cisco IOS XE Software Forwarding Information Base DoS (cisco-sa-20180328-FIB-dos)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Forwarding Information Base code due to a limitation in the way the FIB is internally representing recursive routes. An unauthenticated, network attacker can exploit this, by...

Cisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the NX-API feature of Cisco NX-OS Software that could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to incorrect input validation in the NX-API...

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1610)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the CLI of Cisco NX-OS Software that could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device.The vulnerability is due to...

Cisco cBR Series Converged Broadband Routers High CPU Usage DoS (cisco-sa-20180418-cbr8)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability on Cisco cBR Series Converged Broadband Routers due to incorrect handling of certain DHCP packets. An unauthenticated, adjacent, attacker can exploit this, by sending certain DHCP...

Cisco IOS Software Smart Install DoS (cisco-sa-20180328-smi)

According to its self-reported version, Cisco IOS is affected by a denial of service DoS vulnerability in the Smart Install feature due to improper validation of packet data. An unauthenticated, remote attacker can exploit this by sending a crafted packet to an affected device on TCP port 4786 in...

Cisco IOS XE Software Internet Key Exchange Memory Leak (cisco-sa-20180328-ike)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Internet Key Exchange Version 2 IKEv2 module due to incorrect processing of certain IKEv2 packets. An unauthenticated, remote attacker can exploit this, by sending crafted IKE...

Cisco IOS XE Wireless Controller Manager DoS (cisco-sa-20170927-ios-xe)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability due to insufficient input validation in the wireless controller manager. An unauthenticated, adjacent attacker can exploit this, by submitting a crated association request, to cause...

The vulnerability of the deserialization function in Java software for creating reports for deployed Cisco Security Manager devices allows a attacker to execute arbitrary commands.

The vulnerability of the deserialization function in Java software for creating reports for deployed Cisco Security Manager devices exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Clientless SSL VPN (WebVPN) component of the Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software allows a perpetrator to execute arbitrary code or gain access to confidential information.

The vulnerability of the Clientless SSL VPN WebVPN component of the micro-programming network interface software from Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense exists due to the lack of protective measures for the web page structure. Exploiting this vulnerability allows...

Cisco NX-OS Software Command Injection (cisco-sa-20190515-nxos-cmdinj-1776)

According to its self-reported version, Cisco NX-OS Software is affected by a command injection vulnerability due to insufficient validation of arguments passed to a specific CLI command on an affected device. An authenticated, local attacker can exploit this to execute arbitrary commands on the...