Cisco ASR 1000 Series Router IPv6 Message Handling Denial of Service Vulnerability

The Cisco ASR1000 Series Aggregation Services Routers provide a WAN edge solution that integrates information, communication, collaboration, and commerce. The Cisco ASR 1000 Series Router has a security vulnerability in the processing of IPv6 messages that allows a remote attacker to exploit the...

Cisco Videoscape Delivery System DoS

It's possible to reload device with HTTP request...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2015-04986)

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A security vulnerability exists in the TFTP server of Cisco IOS and IOS XE Software, which arises from a program that does not properly manage memory when processing TFTP requests. A remote attack...

Cisco IOS XR Concurrent Data Management Replication Process BGP Process Denial of Service Vulnerability

A vulnerability in the Concurrent Data Management Replication process of Cisco IOS XR for ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a reload of the Border Gateway Protocol BGP process. The vulnerability is due to improper processing of...

Cisco Videoscape Distribution Suite HTTP Request Remote Denial of Service Vulnerability

Cisco Videoscape is a business provider solution that helps consumers integrate content from pay TV, online video and video-on-demand sources. A denial of service vulnerability exists in Cisco Videoscape Distribution Suite, which could be exploited by a remote attacker to submit a special HTTP...

CVE-2015-0725

Cisco Videoscape Distribution Suite Service Broker aka VDS-SB, when a VDSM configuration on UCS is used, and Videoscape Distribution Suite for Internet Streaming aka VDS-IS or CDS-IS before 3.3.1 R7 and 4.x before 4.0.0 R4 allow remote attackers to cause a denial of service device reload via a...

Zendesk: Security Missconfiguration in Autologin

Here I am addressing Critical misconfiguration in autologin feature 1. Open the link in the browser https://dashboard.zopim.com/home and enter your username and password and don't tick select the option Always sign in automatically and login 2. now logout from your account 3. now you logged out...

PT-2015-1629 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software version 9.32 Description: The issue is related to errors in resource management and allows an attacker to cause a denial of service by sending crafted OSPFv2 packets. This could lead to a system...

Cisco Adaptive Security Appliance OSPFv2 Denial of Service Vulnerability

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. A security vulnerability exists in the OSPFv2 code of the Cisco Adaptive Security Appliance, which can be exploited by an...

Cisco Adaptive Security Appliance SNMP Denial of Service Vulnerability

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. A security vulnerability exists in the SNMP code of the Cisco Adaptive Security Appliance, which can be exploited by an...

PT-2015-1620 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.47 through 8.61.2 Description: The issue is related to the SNMP implementation and is caused by resource management errors. It allows a remote authenticated user to cause a denial of...

GarrettCom Magnum 6K and 10K Switches Remote Denial of Service Vulnerability

GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom USA. A security vulnerability exists in the GarrettCom Magnum 6K and 10K Switches that allows remote attackers to exploit the vulnerability by submitting a special request to reload the device, resulting in a denial of...

CVE-2015-4205

Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service NPU chip reset or line-card reload by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID CSCut19959...

Design/Logic Flaw

Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service NPU chip reset or line-card reload by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID CSCut19959...

CVE-2015-4205

CVE-2015-4205 affects Cisco IOS XR 5.3.1 on ASR 9000 devices. The issue stems from improper flow-control (IEEE 802.3x) PAUSE frame processing, allowing an unauthenticated adjacent attacker to cause a denial of service via NPU chip reset or line-card reload. Impact is a DoS affecting availability ...

Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2015-03854)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in the IPv6 processing code of Cisco IOS XR Software allows an unauthenticated, remote attacker to exploit this vulnerability to cause a line card reload,...

CVE-2015-0776

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

Code injection

Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...

Code injection

The IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500 devices allows remote authenticated users to cause a denial of service device reload by sending a crafted message during IPsec tunnel setup, aka Bug ID CSCur70505...

Cisco Catalyst 6500 Series Switches IPsec Tunnel Handling Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange IKE subsystem of the Cisco WS-IPSEC-3 service module could allow an authenticated, remote attacker to cause a reload of the Catalyst switch. The vulnerability is due to insufficient bounds checks on a specific message during the establishment of an IPs...