Lucene search
+L

887 matches found

OSV
OSV
added 2020/06/03 6:15 p.m.3 views

CVE-2020-3217

A vulnerability in the Topology Discovery Service of Cisco One Platform Kit onePK in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a denial of service DoS condition on...

8.8CVSS7.6AI score0.01091EPSS
SaveExploits0References1
Prion
Prion
added 2020/06/03 6:15 p.m.23 views

Stack overflow

A vulnerability in the Topology Discovery Service of Cisco One Platform Kit onePK in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a denial of service DoS condition on...

8.3CVSS8.9AI score0.01091EPSS
SaveExploits0References1Affected Software3
Prion
Prion
added 2020/06/03 6:15 p.m.19 views

Race condition

A vulnerability in the Simple Network Management Protocol SNMP implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of data that is return...

6.8CVSS7.3AI score0.01028EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
added 2020/06/03 4:0 p.m.77 views

Cisco ASR 920 Series Aggregation Services Router Model 12SZ-IM SNMP Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of data that is return...

6.3CVSS2.2AI score0.01028EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/06/03 4:0 p.m.70 views

Cisco IOS, IOS XE, IOS XR, and NX-OS Software One Platform Kit Remote Code Execution Vulnerability

A vulnerability in the Topology Discovery Service of Cisco One Platform Kit onePK in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a denial of service DoS condition on...

8.8CVSS2.5AI score0.01091EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/10 12:0 a.m.8 views

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2020-22987)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An input validation error vulnerability exists in the NDP proxy function of the EVPN leaf node in Juniper Networks Junos O...

7.4CVSS6.8AI score0.00531EPSS
SaveExploits0
OSV
OSV
added 2020/04/09 11:15 p.m.7 views

CVE-2020-1633

Due to a new NDP proxy feature for EVPN leaf nodes introduced in Junos OS 17.4, crafted NDPv6 packets could transit a Junos device configured as a Broadband Network Gateway BNG and reach the EVPN leaf node, causing a stale MAC address entry. This could cause legitimate traffic to be discarded,...

6.5CVSS5.8AI score0.00531EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.8 views

The vulnerability of the Cisco Discovery protocol allows attackers to trigger a maintenance failure in operating systems such as Cisco NX-OS and Cisco FXOS.

The vulnerability of the Cisco Discovery protocol’s implementation in Cisco NX-OSS and Cisco FXOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

8.8CVSS7.5AI score0.01894EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/03/27 12:0 a.m.32 views

Cisco FXOS Software Link Layer Discovery Protocol DoS (cisco-sa-20181017-fxnx-os-dos)

A denial of service DoS vulnerability exists in Cisco FX-OS Software due to improper input validation of certain type, length, value TLV fields of the LLDP frame header. An unauthenticated, local attacker can exploit this issue, by sending a crafted LLDP packet to an interface on the targeted...

8.8CVSS6.8AI score0.00788EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/03/06 12:0 a.m.31 views

Cisco UCS Software Cisco Discovery Protocol Arbitrary Code Execution and DoS (cisco-sa-20200226-fxos-nxos-cdp)

According to its self-reported version, Cisco UCS Software is affected by a vulnerability in the Cisco Discovery Protocol feature due to insufficient validation of Cisco Discovery Protocol packet headers. An unauthenticated, adjacent attacker can exploit this, by sending a crafted Cisco Discovery...

8.8CVSS8.3AI score0.01894EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/03/06 12:0 a.m.28 views

Cisco NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and DoS (cisco-sa-20200226-fxos-nxos-cdp)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Cisco Discovery Protocol feature due to insufficient validation of Cisco Discovery Protocol packet headers. An unauthenticated, adjacent attacker can exploit this, by sending a crafted Cisco Discove...

8.8CVSS8.3AI score0.01894EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2020/03/06 12:0 a.m.30 views

Cisco FXOS Software Cisco Discovery Protocol Arbitrary Code Execution and DoS (cisco-sa-20200226-fxos-nxos-cdp)

According to its self-reported version, Cisco FXOS Software is affected by a vulnerability in the Cisco Discovery Protocol feature due to insufficient validation of Cisco Discovery Protocol packet headers. An unauthenticated, adjacent attacker can exploit this, by sending a crafted Cisco Discover...

8.8CVSS8.3AI score0.01894EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.13 views

The vulnerability in the implementation of the Cisco Discovery protocol for microprogrammed IP telephones allows a attacker to execute any code with root privileges or to trigger a reboot of the vulnerable IP telephone.

The vulnerability of the Cisco Discovery protocol implementation in microprogramming software for Cisco IP phones exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges or trigger a reboot of the...

8.8CVSS8.3AI score0.03095EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.9 views

The vulnerability in the implementation of the Cisco Discovery protocol of the IP camera software from Cisco Video Surveillance series 8000 allows a intruder to execute arbitrary code or trigger a reboot of the vulnerable IP camera.

The vulnerability of the Cisco Discovery protocol implemented in Cisco Video Surveillance IP cameras of the 8000 series exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a restart of the vulnerable IP...

8.8CVSS8.3AI score0.05728EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.9 views

The vulnerability of the Cisco Discovery protocol implementation in the Cisco IOS XR operating system allows a perpetrator to execute arbitrary code or trigger a reboot of the vulnerable device.

The vulnerability of the Cisco Discovery protocol implementation in the Cisco IOS XR operating system is related to the use of uncontrolled format strings. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a restart of the vulnerable device remotely...

8.8CVSS8.3AI score0.11685EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.9 views

The vulnerability of the Cisco Discovery protocol in the Cisco NX-OSS routing devices allows a attacker to execute arbitrary code or trigger a reboot of the vulnerable device.

The vulnerability of the Cisco Discovery protocol in the Cisco NX-OSS router’s network operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a reboot of the vulnerable device...

8.8CVSS8.5AI score0.04784EPSS
SaveExploits0References3
NVD
NVD
added 2020/02/26 5:15 p.m.24 views

CVE-2020-3172

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service DoS condition on an affected device. The vulnerability exists because of...

8.8CVSS9.4AI score0.01894EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/26 5:15 p.m.6 views

CVE-2020-3172

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service DoS condition on an affected device. The vulnerability exists because of...

8.8CVSS7.8AI score0.01894EPSS
SaveExploits0References1
Prion
Prion
added 2020/02/26 5:15 p.m.20 views

Remote code execution

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service DoS condition on an affected device. The vulnerability exists because of...

8.3CVSS9.2AI score0.01894EPSS
SaveExploits0References1Affected Software3
Vulnrichment
Vulnrichment
added 2020/02/26 4:50 p.m.9 views

CVE-2020-3172 Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service DoS condition on an affected device. The vulnerability exists because of...

8.8CVSS8.9AI score0.01894EPSS
SaveExploits0References1
Rows per page
Query Builder