CVE-2017-6643

A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Virtual Directory information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensiti...

Design/Logic Flaw

A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Virtual Directory information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensiti...

Design/Logic Flaw

A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when...

Design/Logic Flaw

A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when...

Design/Logic Flaw

A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to disable TCP ports and cause a denial of service DoS condition on an affected system. The vulnerability is due to a lack of rate-limiting...

CVE-2017-6650

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An...

Design/Logic Flaw

A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.00.234 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit...

Command injection

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An...

CVE-2017-6642

A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when...

Design/Logic Flaw

A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Temporary File information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive...

Design/Logic Flaw

A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Order information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when...

CVE-2017-6630

A vulnerability in the Session Initiation Protocol SIP implementation of Cisco IP Phone 8851 11.00.1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to an abnormal SIP message. An attacker could exploit this vulnerability by...

CVE-2017-6647

A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Temporary File information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive...

CVE-2017-6632

Cisco FirePOWER System Software SSL Logging DoS (CVE-2017-6632) affects 5.3.0–6.2.2 when SSL policy logging is enabled. An unauthenticated remote attacker can cause a DoS by sending a flood of crafted TCP packets, due to mis‑configurable SSL logging of certain TCP traffic. Impact is high availabi...

CVE-2017-6635

CVE-2017-6635 affects Cisco Prime Collaboration Provisioning Software (before Release 12.1). The web interface allows authenticated, remote attackers to delete arbitrary files via crafted HTTP requests that exploit directory traversal and weak RBAC enforcement. The issue is rooted in insufficient...

CVE-2017-6642

A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when...

CVE-2017-6645

CVE-2017-6645 concerns Cisco Remote Expert Manager Software (web interface) 11.0.0. The issue arises from insufficient protection of sensitive data in HTTP responses, enabling an unauthenticated remote attacker to access sensitive information via the web interface. Impact is information disclosur...

CVE-2017-6654

CVE-2017-6654 affects Cisco Unified Communications Manager (CUCM) web-based management interface versions 10.5–11.5. The issue is an XSS flaw caused by insufficient validation of user-supplied input, allowing an unauthenticated, remote attacker to entice a user to click a crafted link and execute...

CVE-2017-6634

The CVE-2017-6634 issue affects Cisco Industrial Ethernet 1000 Series Switches running version 1.3, where the Device Manager web interface lacks CSRF protection. This allows an unauthenticated, remote attacker to trick a logged-in user into performing arbitrary requests via the interface, with th...

CVE-2017-6630

CVE-2017-6630 affects Cisco IP Phone 8851 with firmware 11.0(0.1). A remote, unauthenticated attacker can trigger a denial of service by sending manipulated CANCEL SIP messages due to an abnormal SIP handling in the device. Multiple sources (Cisco advisory Cisco-SA-20170517-sip, Tenable plugin, a...