Lucene search
+L

306 matches found

CNVD
CNVD
added 2021/03/29 12:0 a.m.37 views

Cisco IOx Application Denial of Service Vulnerability

Cisco Iox is the U.S. Cisco Cisco a combination of Cisco IOS and Linux OS for secure network connectivity and the development of IOT applications for secure development environment. The Cisco IOx Application Framework's Cisco 809 Industrial Integrated Services Routers Industrial ISRs, Cisco 829...

7.5CVSS6.8AI score0.01305EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/26 12:0 a.m.23 views

Cisco IOx Application Directory Traversal Vulnerability

Cisco Iox is the U.S. Cisco Cisco a combination of Cisco IOS and Linux OS for secure network connectivity and the development of IOT applications for secure development environment. A security vulnerability exists in the Cisco IOx application, which can be exploited by a remote attacker to conduc...

6.5CVSS6.8AI score0.02671EPSS
SaveExploits1References1
NVD
NVD
added 2021/03/24 8:15 p.m.22 views

CVE-2021-1460

A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers Industrial ISRs, Cisco 829 Industrial ISRs, Cisco CGR 1000 Compute Module, and Cisco IC3000 Industrial Compute Gateway could allow an unauthenticated, remote attacker to cause a denial of...

7.5CVSS0.01305EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/24 8:15 p.m.7 views

CVE-2021-1460

A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers Industrial ISRs, Cisco 829 Industrial ISRs, Cisco CGR 1000 Compute Module, and Cisco IC3000 Industrial Compute Gateway could allow an unauthenticated, remote attacker to cause a denial of...

7.5CVSS7.1AI score0.01305EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/24 8:15 p.m.24 views

CVE-2021-1384

A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands into the underlying operating system as the root user. This vulnerability is due to incomplete validation of fields in the application packages...

8.5CVSS0.3539EPSS
SaveExploits1References2
Prion
Prion
added 2021/03/24 8:15 p.m.19 views

Command injection

A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands into the underlying operating system as the root user. This vulnerability is due to incomplete validation of fields in the application packages...

8.5CVSS7.3AI score0.3539EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/03/24 8:15 p.m.25 views

Design/Logic Flaw

A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers Industrial ISRs, Cisco 829 Industrial ISRs, Cisco CGR 1000 Compute Module, and Cisco IC3000 Industrial Compute Gateway could allow an unauthenticated, remote attacker to cause a denial of...

5CVSS7.5AI score0.01305EPSS
SaveExploits0References1Affected Software3
Prion
Prion
added 2021/03/24 8:15 p.m.25 views

Directory traversal

A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks and read and write files on the underlying operating system or host system. This vulnerability occurs because the devic...

6CVSS7AI score0.02671EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
added 2021/03/24 8:7 p.m.33 views

CVE-2021-1384 Cisco IOx for IOS XE Software Command Injection Vulnerability

A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands into the underlying operating system as the root user. This vulnerability is due to incomplete validation of fields in the application packages...

6.5CVSS7.5AI score0.3539EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2021/03/24 8:7 p.m.11 views

CVE-2021-1384 Cisco IOx for IOS XE Software Command Injection Vulnerability

A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands into the underlying operating system as the root user. This vulnerability is due to incomplete validation of fields in the application packages...

6.5CVSS7.5AI score0.3539EPSS
SaveExploits1References2
CVE
CVE
added 2021/03/24 8:7 p.m.124 views

CVE-2021-1384

Summary of vulnerability details : CVE-2021-1384 affects Cisco IOx in Cisco IOS XE Software, enabling an authenticated, remote attacker to inject commands into the underlying OS as root. The root cause is incomplete validation of fields in application packages loaded onto IOx, exploitable by load...

8.5CVSS7AI score0.3539EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/03/24 8:7 p.m.28 views

CVE-2021-1385 Cisco IOx Application Environment Path Traversal Vulnerability

A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks and read and write files on the underlying operating system or host system. This vulnerability occurs because the devic...

6.5CVSS6.6AI score0.02671EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2021/03/24 8:7 p.m.12 views

CVE-2021-1385 Cisco IOx Application Environment Path Traversal Vulnerability

A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks and read and write files on the underlying operating system or host system. This vulnerability occurs because the devic...

6.5CVSS6.8AI score0.02671EPSS
SaveExploits1References2
CVE
CVE
added 2021/03/24 8:7 p.m.100 views

CVE-2021-1385

CVE-2021-1385 affects the Cisco IOx Application Hosting Environment across multiple Cisco platforms. The root cause is improper URI validation in IOx API requests, enabling an authenticated, remote attacker to perform directory traversal and read/write files on the underlying OS/host. Impact is r...

6.5CVSS6.7AI score0.02671EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
added 2021/03/24 8:6 p.m.34 views

CVE-2021-1460 Cisco IOx Application Framework Denial of Service Vulnerability

A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers Industrial ISRs, Cisco 829 Industrial ISRs, Cisco CGR 1000 Compute Module, and Cisco IC3000 Industrial Compute Gateway could allow an unauthenticated, remote attacker to cause a denial of...

5.3CVSS7.7AI score0.01305EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/03/24 8:6 p.m.10 views

CVE-2021-1460 Cisco IOx Application Framework Denial of Service Vulnerability

A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers Industrial ISRs, Cisco 829 Industrial ISRs, Cisco CGR 1000 Compute Module, and Cisco IC3000 Industrial Compute Gateway could allow an unauthenticated, remote attacker to cause a denial of...

5.3CVSS7AI score0.01305EPSS
SaveExploits0References1
CVE
CVE
added 2021/03/24 8:6 p.m.73 views

CVE-2021-1460

The CVE-2021-1460 issue affects the Cisco IOx Application Framework running on Cisco 809/829 Industrial ISRs, Cisco CGR 1000 Compute Module, and Cisco IC3000 Industrial Compute Gateway. The root cause is insufficient error handling during packet processing in the IOx web server, which could be tr...

7.5CVSS6.1AI score0.01305EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/24 4:0 p.m.4 views

CVE-2021-1460

A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers Industrial ISRs, Cisco 829 Industrial ISRs, Cisco CGR 1000 Compute Module, and Cisco IC3000 Industrial Compute Gateway could allow an unauthenticated, remote attacker to cause a denial of...

7.5CVSS6.6AI score0.01305EPSS
SaveExploits0References2
Cisco
Cisco
added 2021/03/24 4:0 p.m.83 views

Cisco IOx Application Environment Path Traversal Vulnerability

A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks and read and write files on the underlying operating system or host system. This vulnerability occurs because the devic...

6.5CVSS6.7AI score0.02671EPSS
SaveExploits1References1
Cisco
Cisco
added 2021/03/24 4:0 p.m.81 views

Cisco IOx for IOS XE Software Command Injection Vulnerability

A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands into the underlying operating system as the root user. This vulnerability is due to incomplete validation of fields in the application packages...

6.5CVSS7AI score0.3539EPSS
SaveExploits1References1
Rows per page
Query Builder