Cisco IOS and IOS XE TCP Denial of Service Vulnerability

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the TCP socket code in Cisco IOS and IOS XE Software. A remote attacker could exploit this vulnerability to cause a denial of service device reload...

CVE-2018-0475

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability

Cisco IOS XE Software is the operating system for Cisco network appliances, and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec is a security appliance from cisco. A denial of service vulnerability exists in Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance...

Denial of Service Vulnerability in the FXOS Software and NX-OS Software Fabric Services Component of Multiple Cisco Products (CNVD-2018-14571)

Cisco Firepower 4100 Series Next-Generation Firewalls are all products of Cisco Corporation.Cisco Firepower 4100 Series Next-Generation Firewalls is a 4100 series firewall device. Cisco Firepower 4100 Series Next-Generation Firewalls are 4100 series firewalls.MDS 9000 Series Multilayer Switches a...

CVE-2018-0330

A vulnerability in the NX-API management application programming interface API in devices running, or based on, Cisco NX-OS Software could allow an authenticated, remote attacker to execute commands with elevated privileges. The vulnerability is due to a failure to properly validate certain...

CVE-2018-0308

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition. The vulnerability exists because the affected software insufficiently...

Cisco IOS XE Software CLI Parser Command Injection Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco for its network devices.CLI parser is one of the command line command parsers. A command injection vulnerability exists in the CLI parser in Cisco IOS XE Software, which arises from the program's failure to adequately filter command...

Lenovo Patches Networking OS Vulnerability Dating Back to 2004

Lenovo patched a flaw in its networking operating system dating back to 2004 that allowed attackers to perform an authentication bypass attack via a mechanism called “HP Backdoor.” If exploited, an attacker could gain admin-level access on affected switches, Lenovo said. The vulnerability is rate...

Multiple Cisco Products Cisco NX-OS System Software Command Injection Vulnerability

Cisco Multilayer Director Switches are products of Cisco Corporation.Cisco Multilayer Director Switches are switches.Nexus 2000 Series Fabric Extenders are Nexus 2000 Series Array Extenders.NX-OS System Software is a set of operating systems used in them.CLI is a command line program used in...

CVE-2017-12211

A vulnerability in the IPv6 Simple Network Management Protocol SNMP code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause high CPU usage or a reload of the device. The vulnerability is due to IPv6 sub block corruption. An attacker could exploit this...

ONOS Cross-Site Scripting Vulnerability

ONOS is an open source SDN network operating system. A cross-site scripting vulnerability exists in ONOS versions 1.8.0, 1.9.0, and 1.10.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2017-6731

A vulnerability in Multicast Source Discovery Protocol MSDP ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the MSDP session to be unexpectedly reset, causing a short denial of service DoS condition. The MSDP session will restart within...

Cisco Nexus 5000 Series Switches NX-OS System Software Command Injection Vulnerability (CNVD-2017-07542)

Cisco Nexus 5000 Series Switches are the Cisco Nexus series of data center-class switches from Cisco, Inc.Cisco NX-OS System Software is the data center operating system that runs on them. A command injection vulnerability exists in the Telnet CLI command in Cisco NX-OS System Software versions 7...

The vulnerabilities of the EnergyWise module in the Cisco IOS operating system allow a hacker to trigger buffer overflows or equipment reboots, accompanied by a failure in service delivery.

The multiple vulnerabilities of the EnergyWise module of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities can allow a malicious actor to trigger buffer overflows or system reboots, accompanied by service failure through specially created...

The vulnerability of the NX-OS network operating system allows a hacker to bypass the access control list configuration for certain traffic.

The vulnerability of the An Access-Control Filtering Mechanisms Bypass component in the networking operating system NX-OS exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass the access control list configuration for certain...

CVE-2017-3879

A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to...

Juniper Junos Denial of Service Vulnerability (CNVD-2017-00602)

JuniperJunos is a JuniperNetworks network operating system dedicated to the company's hardware systems. The operating system provides a secure programming interface and the JunosSDK. A security vulnerability exists in JuniperJunos. An attacker could exploit this vulnerability to cause an...

CVE-2016-6409

The Data in Motion DMo component in Cisco IOS 15.61T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service out-of-bounds access via crafted traffic, aka Bug ID CSCuy54015...

CVE-2016-6414

iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223...

Cisco IOS XR Software Remote Denial of Service Vulnerability

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A remote denial of service vulnerability exists in the Cisco IOS XR Software Releases 5.1.x, 5.2.x, and 5.3.x versions. ...