CVE-2019-1892: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Secure Sockets Layer SSL input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a memory corruption on an affected device. The vulnerability is due to improper validation of HTTPS...

CVE-2019-1614 Cisco NX-OS Software NX-API Command Injection Vulnerability

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to incorrect input validation of user-supplied data by the NX-API subsystem. An attacker could exploit this...

Cisco ASA 5500 Content Security and Control Security Services Module Denial of Service Vulnerability

The Cisco ASA 5500 is an X-Series next-generation firewall security appliance from Cisco, Inc.The Content Security and Control Security Services Module CSC-SSM is one of the content security and control security services modules. A security vulnerability exists in the HTTPS inspection engine in...

CVE-2014-3263

The ScanSafe module in Cisco IOS 15.33M allows remote attackers to cause a denial of service device reload via HTTPS packets that require tower processing, aka Bug ID CSCum97038...

CVE-2014-3263: Improper Input Validation

The ScanSafe module in Cisco IOS 15.33M allows remote attackers to cause a denial of service device reload via HTTPS packets that require tower processing, aka Bug ID CSCum97038...

PT-2014-5159

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.33M Description A vulnerability in the content scanning module of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a reload of the affected device. The issue occurs when processing HTTPS packets...

CVE-2014-2258

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service defect-mode transition via crafted HTTPS packets, a different vulnerability than CVE-2014-2259...

PT-2014-4589

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1500 CPU PLC devices versions prior to 1.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition, by sending crafted HTTPS packets. Recommendations For versions...

CVE-2014-2259: Undefined Security Weakness

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service defect-mode transition via crafted HTTPS packets...