CVE-2018-0470

CVE-2018-0470 affects Cisco IOS XE Software web framework. An unauthenticated, remote attacker can trigger a buffer overflow by sending a malformed HTTP packet, causing denial of service. The vulnerability stems from improper parsing of HTTP requests destined to a device. Affected product familie...

CVE-2018-0466

CVE-2018-0466 affects Cisco IOS and IOS XE OSPFv3; vulnerability stems from incorrect handling of OSPFv3 packets, enabling an unauthenticated adjacent attacker to cause a device reload (DoS). Exploit vector is crafted OSPFv3 LSA packets. Remediation is upgrade to fixed Cisco releases per the Cisc...

CVE-2018-0131

A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the encrypted nonces of an Internet Key Exchange Version 1 IKEv1 session. The vulnerability exists because the affected software...

CVE-2018-0315

A vulnerability in the authentication, authorization, and accounting AAA security services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause an affected device to reload, resulting in a denial of service DoS condition...

CVE-2018-0315

A vulnerability in the authentication, authorization, and accounting AAA security services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause an affected device to reload, resulting in a denial of service DoS condition...

CVE-2018-0315

CVE-2018-0315 affects Cisco IOS XE Software Fuji 16.7.1 and 16.8.1 when using AAA login authentication. The issue is caused by incorrect memory operations during username parsing in login authentication, allowing an unauthenticated, remote attacker to execute arbitrary code or cause a device relo...

Cisco IOS XE Software Multiple Vulnerabilities in ntpd (cisco-sa-20150408-ntpd)

According to its self-reported version, the IOS XE is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

CVE-2018-0194

Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software, which could allow the attacker to gain access to the underlying Linux shell of an affected device and execute comman...

Cisco IOS Software, IOS XE Software, and IOS XR Software Link Layer Discovery Protocol Subsystem Elevation of Privilege Vulnerability

Cisco IOS Software, IOS XE Software, and IOS XR Software are operating systems developed by Cisco for its network devices.The Link Layer Discovery Protocol LLDP subsystem is one of these link layer discovery protocol subsystems. . A security vulnerability exists in the LLDP subsystem in Cisco IOS...

Cisco IOS Software and IOS XE Software quality of service subsystem buffer error vulnerability

Cisco IOS Software and IOS XE Software are operating systems developed by Cisco for its network equipment. quality of service QoS subsystem is one of the network quality of service subsystems. A buffer overflow vulnerability exists in the QoS subsystem in Cisco IOS Software and IOS XE Software,...

CVE-2018-0190

Multiple vulnerabilities in the web-based user interface web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation...

CVE-2018-0184

A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected software improperl...

CVE-2018-0188

Multiple vulnerabilities in the web-based user interface web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation...

CVE-2018-0176

Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerabilities are due to the affected softwa...

CVE-2018-0170

A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition, related to the OpenDNS software. The vulnerability is due to a logic error that exists when handling a malformed incoming...

CVE-2018-0177

A vulnerability in the IP Version 4 IPv4 processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads ...

Buffer overflow

Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol LLDP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition or execute arbitrary code with elevated...

Design/Logic Flaw

A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...

CVE-2018-0150

A vulnerability in Cisco IOS XE Software could allow an unauthenticated, remote attacker to log in to a device running an affected release of Cisco IOS XE Software with the default username and password that are used at initial boot, aka a Static Credential Vulnerability. The vulnerability is due...

Cross site scripting

Multiple vulnerabilities in the web-based user interface web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation...