Code injection

The IPv6 implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCue34342...

D-Link Router Vulnerable to Reflected, Stored XSS

D-Link’s 2760N DSL-2760U-BN routers allegedly contain a number of stored and reflective cross-site scripting XSS vulnerabilities. Researcher Liad Mizrachi said he contacted D-Link to disclose the details of the bugs to them on six separate occasions – twice in August, twice in September, and once...

D-Link Router 2760N Cross Site Scripting

Advisory: D-Link Router 2760N DSL-2760U-BN Multiple XSS Author: Liad Mizrachi Vendor URL: http://www.dlink.com Status: Fixed CVE-ID: CVE-2013-5223 ========================== Vulnerability Description ========================== Multiple Cross-Site Scripting XSS vulnerabilities present in D-Link...

CVE-2013-5546

The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via large TCP packets that are processed by the 1 NAT or 2 ALG component, aka Bug ID CSCud72509...

CVE-2013-5545

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending many PPTP packets over NAT, aka Bug ID CSCuh19936...

Design/Logic Flaw

The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via large TCP packets that are processed by the 1 NAT or 2 ALG component, aka Bug ID CSCud72509...

CVE-2013-5546

The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via large TCP packets that are processed by the 1 NAT or 2 ALG component, aka Bug ID CSCud72509...

CVE-2013-5545

Cisco IOS XE PPTP ALG vulnerability (CVE-2013-5545) affects 1000-series ASR devices running 3.9 before 3.9.2S. The issue—described as a PPTP ALG handling flaw—allows unauthenticated, remote attackers to trigger a reload of ESP/RP and cause a DoS by sending many PPTP packets over NAT. Connected do...

CVE-2013-5546

The CVE-2013-5546 issue affects Cisco IOS XE on 1000 ASR devices, specifically in TCP reassembly. Affects the NAT and ALG processing paths where large TCP packets can trigger a device reload, causing a denial of service. Root cause: improper handling in TCP reassembly leading to crash under certa...

CVE-2013-5545

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending many PPTP packets over NAT, aka Bug ID CSCuh19936...

TP-Link Cross Site Request Forgery Vulnerability

This write up goes into detail about how real world cross site request forgery attacks can be used to hijack DNS on TP-Link routers. I. Introduction Today the majority of wired Internet connections is used with an embedded NAT router, which allows using the same Internet connection with several...

Cisco IOS Software Network Address Translation Vulnerabilities (cisco-sa-20130925-nat)

The Cisco IOS Software implementation of the network address translation NAT feature contains three vulnerabilities when translating IP packets that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. Cisco has released free software updates that address...

CVE-2013-5479

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730...

CVE-2013-5480

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCuf28733...

CVE-2013-5481

The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via crafted TCP port-1723 packets, aka Bug ID CSCtq14817...

Code injection

The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via crafted TCP port-1723 packets, aka Bug ID CSCtq14817...

Design/Logic Flaw

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730...

Code injection

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCuf28733...

CVE-2013-5481

Cisco IOS Software NAT implementation contains a vulnerability in PPTP handling that, when NAT is used, can be exploited by remote attackers sending crafted TCP port-1723 packets to cause a DoS and device reload. Affected releases include Cisco IOS 12.2 and 15.0–15.3. The issue is identified as B...

CVE-2013-5480

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCuf28733...