Input validation

A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly VFR feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper reassembly of large packe...

Design/Logic Flaw

A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service DoS condition. This vulnerability is due to the improper handling of large...

Design/Logic Flaw

A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attack...

Input validation

A vulnerability in the IPv6 DHCP version 6 DHCPv6 relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could...

Design/Logic Flaw

A vulnerability in the access point AP joining process of the Control and Provisioning of Wireless Access Points CAPWAP protocol of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

Authorization

A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to insufficient restrictions on the hosted application. An attacker could exploit thi...

CVE-2023-20029 Cisco IOS XE Software Privilege Escalation Vulnerability

A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attack...

CVE-2023-20065

The CVE-2023-20065 issue affects Cisco IOS XE Software IOx Application Hosting Environment. A local, authenticated attacker can escape the Cisco IOx container and execute commands on the underlying OS with root privileges due to insufficient restrictions on hosted applications. Affected: Cisco IO...

CVE-2023-20029

CVE-2023-20029 describes a privilege-escalation flaw in the Meraki onboarding feature of Cisco IOS XE Software. An authenticated, local attacker could elevate to root by modifying Meraki registration parameters due to insufficient memory protection. Affected component: Meraki onboarding/migration...

CVE-2023-20072

Cisco IOS XE Software fragmentation handling flaw in tunnel protocol packets (e.g., GRE) could allow an unauthenticated remote attacker to cause a reload and DoS. Affected: Cisco IOS XE; cause: large fragmented tunnel packets. Exploitation requires directed traffic to the device. Cisco has releas...

CVE-2023-20027 Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability

A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly VFR feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper reassembly of large packe...

CVE-2023-20027

The CVE-2023-20027 issue affects Cisco IOS XE Software: IPv4 Virtual Fragmentation Reassembly (VFR) when MTU on a tunnel/physical interface is > 4,615 bytes. The root cause is improper reassembly of large fragments, allowing an unauthenticated remote attacker to trigger a DoS by sending fragme...

CVE-2023-20066 Cisco IOS XE Software Web UI Path Traversal Vulnerability

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a directory traversal and access resources that are outside the filesystem mountpoint of the web UI. This vulnerability is due to an insufficient security configuration. An attacker cou...

CVE-2023-20067

Cisco IOS XE Software for Wireless LAN Controllers (WLCs) is affected by CVE-2023-20067 due to insufficient input validation in the HTTP-based client profiling feature, enabling an unauthenticated adjacent attacker to cause DoS by sending crafted traffic through a wireless AP. The issue can eleva...

CVE-2023-20066

CVE-2023-20066 affects Cisco IOS XE Software Web UI, enabling authenticated remote directory traversal to access files outside the UI mountpoint due to an insufficient security configuration. The vulnerability is triggered by crafted web UI requests and could permit read access to restricted file...

CVE-2023-20082 Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

CVE-2023-20080 Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability

A vulnerability in the IPv6 DHCP version 6 DHCPv6 relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could...

CVE-2023-20066 Cisco IOS XE Software Web UI Path Traversal Vulnerability

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a directory traversal and access resources that are outside the filesystem mountpoint of the web UI. This vulnerability is due to an insufficient security configuration. An attacker cou...

CVE-2023-20082

Cisco IOS XE Software for Cisco Catalyst 9300 Series switches contains a Secure Boot bypass (CVE-2023-20082). The issue stems from errors when retrieving the public release key used for image signature verification, allowing an authenticated, level-15 privileged user or a physically compromising ...

Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software, which results from...