Information disclosure

A vulnerability in the Cisco application-hosting framework CAF of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. Affected Products: This vulnerability affects specific releases of the Cisco IOx subsystem of Cisco IOS and IOS XE Software. More...

CVE-2016-9199

A vulnerability in the Cisco application-hosting framework CAF of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. Affected Products: This vulnerability affects specific releases of the Cisco IOx subsystem of Cisco IOS and IOS XE Software. More...

CVE-2016-9199

CVE-2016-9199 affects Cisco IOx’s Application-Hosting Framework (CAF) within the Cisco IOx subsystem of Cisco IOS/IOS XE. The vulnerability is a directory traversal issue caused by insufficient input validation in CAF, allowing an authenticated remote attacker to read arbitrary files on a targete...

Cisco IOS and IOS XE Software Path Traversal Vulnerability

Cisco IOx is a suite of applications from Cisco USA that provide unified hosting capabilities for Cisco's IoT network infrastructure Cisco routers, switches, etc.. A security vulnerability exists in Cisco IOx on Cisco IOS and IOS XE that stems from the failure of an affected framework on the targ...

Cisco IOx Detection (http)

Detection of Cisco IOx The script sends a HTTP connection request to the server and attempts to detect the presence of Cisco IOx and to extract its version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cisco IOx Application-Hosting Framework Directory Traversal Vulnerability

A vulnerability in the Cisco application-hosting framework CAF of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Cisco IOx Application-Hosting Framework Directory Traversal Vulnerability

A vulnerability in the Cisco application-hosting framework CAF of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. The vulnerability is due to insufficient input validation by the affected framework. An attacker could exploit this vulnerability...

CVE-2016-6412

The Cisco Application-hosting Framework CAF component in Cisco IOS 15.61T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773...

CVE-2016-6412

The CVE-2016-6412 entry describes a vulnerability in Cisco IOS/IOS XE’s Application-hosting Framework (CAF) when the IOx feature set is enabled. The issue arises from insufficient input validation in CAF, allowing a remote attacker to induce a CAF user to download an attacker-controlled file by s...

Cisco IOS and IOS XE Software Application-Hosting Framework Unauthorized File Access Vulnerability

Cisco IOS and IOS XE Software are operating systems developed by Cisco in the United States for its network devices. An unauthorized file access vulnerability exists in the Application-Hosting Framework component of Cisco IOS and IOS XE Software. When the Iox feature setting is enabled, a remote...

Cisco IOS and IOS XE Software Data in Motion Denial of Service Vulnerability

Cisco IOS and IOS XE are operating systems developed by Cisco for its network devices. Cisco IOS version 15.61T and IOS XE Software DMo component denial of service vulnerability. An attacker can exploit this vulnerability to cause a denial of service out-of-bounds access by sending a specially...

CVE-2016-6414

iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223...

CVE-2016-6414

iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223...

Cisco IOS Software Data in Motion Component Denial of Service Vulnerability (cisco-sa-20160921-dmo)

A vulnerability in the Cisco Data in Motion DMo component for Cisco IOS Software with the IOx feature set could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition for the DMo process on a targeted system. SPDX-FileCopyrightText: 2016 Greenbone AG Some tex...

Cisco IOS and IOS XE Cisco IOx Local Manager Cross-Site Scripting Vulnerability

Cisco IOS and IOS XE are both operating systems developed by Cisco for its network devices.Cisco IOx Local Manager is one of the local management components. A cross-site scripting vulnerability exists in the web framework in Cisco IOx Local Manager in Cisco IOS version 15.52T and IOS XE. A remot...

Cisco Fog Director for IOx Arbitrary File Write Vulnerability

Cisco Fog Director for IOx is an automated management platform for centralized management of multiple applications running at the network edge based on IOx an end-to-end application support system that provides application hosting capabilities from Cisco. The platform controls application setting...

CVE-2016-6405

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

CVE-2016-6404

Cross-site scripting XSS vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.52T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854...

CVE-2016-6403

The Data in Motion DMo application in Cisco IOS 15.61T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted packet, aka Bug IDs CSCuy82904, CSCuy82909, and CSCuy82912...

Cross site scripting

Cross-site scripting XSS vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.52T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854...