Cisco IR800 Integrated Services Router ROM Monitor Input Validation Vulnerability

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...

CVE-2017-3853

A vulnerability in the Data-in-Motion DMo process installed with the Cisco IOx application environment could allow an unauthenticated, remote attacker to cause a stack overflow that could allow remote code execution with root privileges in the virtual instance running on an affected device. The...

Design/Logic Flaw

Cisco IOS 15.53M on Integrated Services Router ISR 800, 819, and 829 devices allows remote attackers to cause a denial of service memory consumption via crafted TCP packets on the SSH port, aka Bug ID CSCuu13476...

CVE-2015-6289

Cisco IOS 15.53M on Integrated Services Router ISR 800, 819, and 829 devices allows remote attackers to cause a denial of service memory consumption via crafted TCP packets on the SSH port, aka Bug ID CSCuu13476...

CVE-2015-6289: Undefined Security Weakness

Cisco IOS 15.53M on Integrated Services Router ISR 800, 819, and 829 devices allows remote attackers to cause a denial of service memory consumption via crafted TCP packets on the SSH port, aka Bug ID CSCuu13476...

CVE-2015-6289

Cisco IOS 15.53M on Integrated Services Router ISR 800, 819, and 829 devices allows remote attackers to cause a denial of service memory consumption via crafted TCP packets on the SSH port, aka Bug ID CSCuu13476...

Cisco IOS ISDN Implementation Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. A security vulnerability in the Cisco IOS ISDN implementation allows remote attackers to conduct denial of service attacks by submitting malformed Q931 SETUP messages...

Code injection

The Network-Based Application Recognition NBAR protocol implementation in Cisco IOS 15.3100M and earlier on Cisco 2900 Integrated Services Router aka Cisco Internet Router devices allows remote attackers to cause a denial of service NBAR process hang via IPv4 packets, aka Bug ID CSCuo73682...

CVE-2015-0586

The Network-Based Application Recognition NBAR protocol implementation in Cisco IOS 15.3100M and earlier on Cisco 2900 Integrated Services Router aka Cisco Internet Router devices allows remote attackers to cause a denial of service NBAR process hang via IPv4 packets, aka Bug ID CSCuo73682...

CVE-2015-0586: Undefined Security Weakness

The Network-Based Application Recognition NBAR protocol implementation in Cisco IOS 15.3100M and earlier on Cisco 2900 Integrated Services Router aka Cisco Internet Router devices allows remote attackers to cause a denial of service NBAR process hang via IPv4 packets, aka Bug ID CSCuo73682...

PT-2014-5239

Name of the Vulnerable Software and Affected Versions Cisco 1800 Series Integrated Services Routers ISR version 15.14M2 Description The issue allows remote attackers to cause a denial of service device hang by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision...

Cisco Security Advisory: Cisco IOS Software Smart Install Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software Smart Install Remote Code Execution Vulnerability Advisory ID: cisco-sa-20110928-smart-install Revision 1.0 For Public Release 2011 September 28 1600 UTC GMT...

CVE-2009-2045

CVE-2009-2045 affects Cisco Video Surveillance Stream Manager firmware on Cisco Video Surveillance Services Platforms and Video Surveillance Integrated Services Platforms, versions before 5.3. An attacker can cause a DoS reboot by sending a malformed UDP payload to port 37000, triggering the xvcr...

Cisco 871集成服务路由器跨站请求伪造漏洞

BUGTRAQ ID: 31218 Cisco 871集成服务路由器是一款小型的宽带无线路由器。 Cisco 871路由器的HTTP管理接口存在跨站请求伪造漏洞，如果用户受骗查看了嵌有恶意代码的网页的话，就会导致在路由器上以15级权限（root）执行任意命令。 Cisco 871 Integrated Services Router Cisco ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cisco.com/warp/public/707/advisory.html html body body...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via 1 a certain "show privilege" command to the /level/15/exec/- URI, and 2 a certain "alias...

I4L: fix isdn_ioctl memory issue

The isdnioctl function in isdncommon.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow...