3230 matches found
Cisco IOS XE Software for Wireless LAN Controllers Multicast DNS Denial of Service Vulnerability
A vulnerability in the multicast DNS mDNS gateway feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. This vulnerability is due to improper management of mDNS client entries. An attacker...
Cisco IOS XE Software DHCP Snooping with Endpoint Analytics Denial of Service Vulnerability
A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to a crafted IPv4 DHCP request packet being mishandle...
PT-2024-8248 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the OSPF version 2 OSPFv2 feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload...
PT-2024-2707 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to the NETCONF feature of Cisco IOS XE Software, where improper validation of user-supplied input could allow an authenticated, remote attacker to elevate...
PT-2024-18646 · Cisco · Cisco Ios Xe +1
Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Intermediate System-to-Intermediate System IS-IS protocol could allow an unauthenticated, adjacent attacker to cause a denial of...
PT-2024-2513 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to insufficient access control in the command-line interface CLI of Cisco IOS XE Software for Cisco Wireless LAN Controllers WLCs. This is due to improper...
PT-2024-2551
Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description The issue is related to improper handling of error conditions in the Data Model Interface DMI services of Cisco IOS XE Software when a device administrator updates an IPv4 acces...
Cisco IOS XE Software 安全漏洞
Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software that stems from A...
Cisco IOS XE Software Unified Threat Defense Command Injection (cisco-sa-iosxe-utd-cmd-JbL8KvHT)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Unified Threat Defense UTD configuration CLI of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying host...
PT-2024-2576 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the IPv4 Software-Defined Access SD-Access fabric edge node feature could allow an unauthenticated, remote attacker to cause high CPU utilization and stop a...
PT-2024-2577 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the auxiliary asynchronous port AUX functions could allow an authenticated, local attacker to cause an affected device to reload or stop responding. This...
Cisco IOS XE Software 安全漏洞
Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software, which stems from a...
Cisco IOS XE Software SD Access Fabric Edge Node DoS (cisco-sa-ios-xe-sda-edge-dos-qZWuWXWG)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the IPv4 Software-Defined Access SD-Access fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and stop al...
PT-2024-2487 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Unified Threat Defense UTD configuration CLI of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands as root...
PT-2024-2578 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Wireless LAN Controllers WLCs affected versions not specified Description: A vulnerability in the multicast DNS mDNS gateway feature could allow an unauthenticated, adjacent attacker to cause a denial of service DoS...
Cisco IOS XE Software Command Authorization Bypass (cisco-sa-aaascp-Tyj4fEJm)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Authentication, Authorization, and Accounting AAA feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to bypass command...
Cisco IOS XE Remote Code Execution
Cisco IOS XE version 16 16.12.10.a / 17.3 17.3.8.a / 17.6 17.6.6a / 17.9 17.9.4a are affected by a vulnerability that allows an unauthenticated remote attacker to execute arbitrary code and also to create an account on an affected system with privilege level 15 access. The attacker can then use...
Cisco IOS XE Software Layer 2 Tunneling Protocol DoS (cisco-sa-ios-xe-l2tp-dos-eB5tuFmV)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Layer 2 Tunneling Protocol L2TP feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device...
Exploit for OS Command Injection in Cisco Ios_Xe
CVE-2023-20273 CVE-2023-20273 Exploit PoC Usage usage:...
Rockwell Automation Stratix Cisco IOS Software and IOS XE Software TCP Packet Memory Leak (CVE-2015-0646)
A vulnerability in the TCP input module of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak and eventual reload of the affected device. The vulnerability is due to improper handling of certain crafted packet sequences used in establishing ...