CVE-2021-1621 Cisco IOS XE Software Interface Queue Wedge Denial of Service Vulnerability

A vulnerability in the Layer 2 punt code of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a queue wedge on an interface that receives specific Layer 2 frames, resulting in a denial of service DoS condition. This vulnerability is due to improper handling of certa...

CVE-2021-1619

Cisco IOS XE Software contains an authentication bypass vulnerability in the AAA function (CVE-2021-1619). An unauthenticated, remote attacker could bypass NETCONF/RESTCONF authentication and, via a sequence of NETCONF/RESTCONF requests, install, manipulate, or delete device configurations or cau...

CVE-2021-1565

CVE-2021-1565 (Cisco IOS XE CAPWAP DoS) : Cisco Catalyst 9000 Family Wireless Controllers running IOS XE are affected by multiple CAPWAP handling flaws due to insufficient validation of CAPWAP packets. An unauthenticated, remote attacker can send malformed CAPWAP frames to cause the device to cra...

CVE-2021-34770

CVE-2021-34770 affects Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers, due to a logic error in CAPWAP packet validation during CAPWAP processing. An unauthenticated, remote attacker could craft CAPWAP packets to execute arbitrary code with administrative privileges or cause a...

CVE-2021-34769

CVE-2021-34769 affects Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers. It stems from insufficient validation of CAPWAP packets in CAPWAP protocol processing, allowing an unauthenticated, remote attacker to cause a crash and reload of the device, resulting in a DoS. The impact...

CVE-2021-34768 Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

CVE-2021-34768

The CVE-2021-34768 entry covers CAPWAP processing flaws in Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers. The vulnerabilities allow an unauthenticated, remote attacker to cause a denial-of-service by sending malformed CAPWAP packets, triggering a crash and device reload. Aff...

CVE-2021-34714

CVE-2021-34714 affects Cisco FXOS, IOS, IOS XE/XR, and NX-OS UDLD implementations. The root cause is improper input validation of UDLD packets, enabling an unauthenticated, adjacent attacker to trigger a device reload and DoS; on IOS XR the impact is limited to reloading the UDLD process. The vul...

CVE-2021-1625 Cisco IOS XE Software Zone-Based Policy Firewall ICMP and UDP Inspection Vulnerability

A vulnerability in the Zone-Based Policy Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent the Zone-Based Policy Firewall from correctly classifying traffic. This vulnerability exists because ICMP and UDP responder-to-initiator flows are not...

CVE-2021-1622

CVE-2021-1622 affects Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers, focusing on the Common Open Policy Service (COPS). The root cause is a deadlock in COPS packet processing that can be triggered under certain conditions, allowing an unauthenticated, remote attacker to cause ...

Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability

A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker could exploit this...

Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is an operating system from the U.S. company Cisco Cisco. Used as a single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity.Cisco IOS XE Software has a denial-of-service vulnerability...

Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service (cisco-sa-ewlc-capwap-dos-gmNjdKOY)

According to its self-reported version, Cisco IOS-XE Software is affected by multiple vulnerabilities. - Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could...

PT-2021-4497 · Cisco · Cisco Fxos +5

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software affected versions not specified Cisco IOS Software affected versions not specified Cisco IOS XE Software affected versions not specified Cisco IOS XR Software affected versions not specified Cisco NX-OS Software affected...

Cisco IOS XE Software Embedded Wireless Controller for Catalyst Access Points Denial of Service (cisco-sa-iosxe-ewc-dos-g6JruHRT)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller EWC Software for Catalyst Access Points APs could allow an unauthenticated, remote attacker to cause a denia...

Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2021-2165)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-rtslib (EulerOS-SA-2021-2164)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family CAPWAP Denial of Service (cisco-sa-ewlc-capwap-dos-2OA3JgKS)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

CVE-2021-1381

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could...

CVE-2021-1352

A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of DECnet traffic that i...