CVE-2015-6272

Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064...

CVE-2015-6272

Cisco IOS XE 2.1.0–2.2.3 and 2.3.0 on ASR 1000 devices are affected when NAT Application Layer Gateway is enabled. A crafted H.323 packet can cause the Embedded Services Processor to crash, leading to a denial of service. The issue is triggered by NAT ALG handling of H.323 messages; no explicit e...

CVE-2015-6273

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly VFR by certain firewall and NAT components, which allows remote attackers to cause a denial of service Embedded Services Processor crash via crafted IP packets, aka Bug IDs CSCtf87624,...

SOL16843 - NAT-PMP vulnerability VU#184540

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

CVE-2014-9715

include/net/netfilter/nfconntrackextend.h in the netfilter subsystem in the Linux kernel before 3.14.5 uses an insufficiently large data type for certain extension data, which allows local users to cause a denial of service NULL pointer dereference and OOPS via outbound network traffic that...

CVE-2015-0688

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

Code injection

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

CVE-2015-0688

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

Cisco ASR1000 Series Routers ESP Module Denial of Service Vulnerability

A vulnerability in the Embedded Services Processor ESP module of Cisco ASR 1000 Series Routers running Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of malformed H.323 packets by an...

CVE-2015-0640

The high-speed logging HSL feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via large IP packets that require NAT and H...

CVE-2015-0640

The high-speed logging HSL feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via large IP packets that require NAT and H...

Vulnerability warning: the D-Link friends of the perbadanan Router the presence of a remote command injection vulnerability-vulnerability warning-the black bar safety net

Recently security researcher at D-Link friends of the perbadanan on the router discovered a serious security vulnerability, an attacker can remotely obtain device The maximum access to the Root, and hijacking DNS settings or on the device to execute arbitrary commands. As early as last 1 1 month,...

Sitecom-MD-25x

Exploit Title: Sitecom MD-253 and MD-254 Network Storage Reverse Shell Exploit Date: 09/11/12 Exploit Author: Mattijs van Ommeren mattijs at alcyon dot nl Vendor Homepage: http://www.sitecom.com Software Link: http://www.sitecom.com/download/5012/SitecomNas.2.4.17.bin Version: 2.4.17 and below...

NAT-PMP Protocol vulnerability 1 2 0 0 million routers at risk-vulnerability and early warning-the black bar safety net

Present in the embedded device vulnerability, especially the kind of small office and home office route, is never a steady stream. This week security researchers discovered a serious vulnerability, because theNAT-PMP Protocol improper design will affect more than 1 2 0 0 million of the router...

NAT-PMP Security Vulnerability Affects 1.2M Routers

Vulnerabilities in embedded devices, in particular small office and home office routers, have been relentless. Another serious issue was discovered this week that affects more than 1.2 million such devices due to improper NAT-PMP protocol implementations, most of which run counter to the...

Incorrect implementation of NAT-PMP in multiple devices

Overview Many NAT-PMP devices are incorrectly configured, allowing them to field requests received on external network interfaces or map forwarding routes to addresses other than that of the requesting host, making them potentially vulnerable to information disclosure and malicious port mapping...

Cisco IOS Software Network Address Translation (NAT) ALG Module DoS (cisco-sa-20140924-nat)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the Network Address Translation NAT application-layer gateway ALG module. This issue exists due to improper handling of multipart Session Description...

CVE-2014-3361

The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service device reload via multipart SDP IPv4 traffic, aka Bug ID CSCun54071...

Code injection

The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service device reload via multipart SDP IPv4 traffic, aka Bug ID CSCun54071...

CVE-2014-3361

The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service device reload via multipart SDP IPv4 traffic, aka Bug ID CSCun54071...