3178 matches found
Cisco Adaptive Security Appliance Software DHCPv6 Packet Handling DoS (cisco-sa-20160420-asa-dhcpv6)
The remote Cisco Adaptive Security Appliance ASA device is affected by a denial of service vulnerability in the DHCPv6 relay feature due to improper validation of DHCPv6 packets. An unauthenticated, remote attacker can exploit this, via specially crafted DHCPv6 packets, to cause the device to...
CVE-2016-1367
The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA Software 9.4.1 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug ID CSCus23248...
Cisco Wireless LAN Controller Web Management Interface Denial of Service Vulnerability
The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. A denial of service vulnerability in the Web management interface of the Cisco Wireless LAN Controller WLC Software could allow an...
Cisco Wireless LAN Controller Denial of Service Vulnerability (CNVD-2016-02517)
The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. A denial of service vulnerability in the Bonjour Task Manager for Cisco Wireless LAN Controller WLC Software allows remote attackers ...
CVE-2016-1367: Undefined Security Weakness
The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA Software 9.4.1 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug ID CSCus23248...
CVE-2016-1362: Undefined Security Weakness
Cisco AireOS 4.1 through 7.4.120.0, 7.5.x, and 7.6.100.0 on Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service device reload via a crafted HTTP request, aka Bug ID CSCun86747...
PT-2016-4733
Name of the Vulnerable Software and Affected Versions Cisco AireOS versions 4.1 through 7.4.120.0 Cisco AireOS version 7.5.x Cisco AireOS version 7.6.100.0 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via a crafted HTTP request...
CVE-2016-1364: Improper Input Validation
Cisco Wireless LAN Controller WLC Software 7.4 before 7.4.130.0MD and 7.5, 7.6, and 8.0 before 8.0.110.0ED allows remote attackers to cause a denial of service device reload via crafted Bonjour traffic, aka Bug ID CSCur66908...
PT-2016-4734
Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software versions 7.4 before 7.4.130.0MD and 7.5, 7.6, and 8.0 before 8.0.110.0ED Description The issue is related to the improper handling of Bonjour traffic by the Cisco Wireless LAN Controller WLC Software,...
Cisco TelePresence Server Malformed STUN Packet Processing DoS (cisco-sa-20160406-cts2)
According to its self-reported version, the Cisco TelePresence Server running on the remote host is affected by a denial of service vulnerability due to improper processing of malformed Session Traversal Utilities for NAT STUN packets. An unauthenticated, remote attacker can exploit this, via...
Code injection
Cisco TelePresence Server 4.12.29 through 4.24.17 on 7010; Mobility Services Engine MSE 8710; Multiparty Media 310, 320, and 820; and Virtual Machine VM devices allows remote attackers to cause a denial of service memory consumption or device reload via crafted HTTP requests that are not followed...
CVE-2015-6313
Cisco TelePresence Server 4.12.29 through 4.24.17 on 7010; Mobility Services Engine MSE 8710; Multiparty Media 310, 320, and 820; and Virtual Machine VM devices allows remote attackers to cause a denial of service memory consumption or device reload via crafted HTTP requests that are not followed...
Cisco TelePresence Server Crafted URL Handling Denial of Service Vulnerability
A vulnerability in Cisco TelePresence Server devices running software versions 4.12.29 through 4.24.17 could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability exists due to a failure of the HTTP parsing engine to handle specially crafted URLs. An attacker...
Cisco IOS XE DHCPv6 Relay Message Handling DoS (cisco-sa-20160323-dhcpv6)
According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the DHCPv6 Relay feature due to improper validation of DHCPv6 relay messages. An unauthenticated, remote attacker can exploit this issue, via a crafte...
CVE-2015-6312: Improper Restriction of Operations within the Bounds of a Memory Buffer
Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine MSE 8710, Multiparty Media 310 and 320, and Virtual Machine VM devices allows remote attackers to cause a denial of service device reload via malformed STUN packets, aka Bug ID CSCuv01348...
CVE-2015-6313: Undefined Security Weakness
Cisco TelePresence Server 4.12.29 through 4.24.17 on 7010; Mobility Services Engine MSE 8710; Multiparty Media 310, 320, and 820; and Virtual Machine VM devices allows remote attackers to cause a denial of service memory consumption or device reload via crafted HTTP requests that are not followed...
Cisco Unified Communications Manager Software Session Initiation Protocol Memory Leak Vulnerability (cisco-sa-20160323-sip)
A vulnerability in the Session Initiation Protocol SIP gateway implementation in Cisco Unified Communications Manager Software could allow an unauthenticated, remote attacker to cause a memory leak and eventual reload of an affected device. Copyright C 2016 Greenbone Networks GmbH Some text...
Cisco Unified Communications Manager SIP Memory Leak DoS (CSCuv39370)
According to its self-reported version, the Cisco Unified Communications Manager CUCM running on the remote device is affected by a denial of service vulnerability in the Session Initiation Protocol SIP gateway implementation due to improper handling of malformed SIP messages. An unauthenticated,...
CVE-2016-1351
The Locator/ID Separation Protocol LISP implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service device reload via a crafted header in a packet, aka Bug ID CSCuu64279...