CVE-2021-34724

CVE-2021-34724 affects Cisco IOS XE SD-WAN Software CLI. The root cause is insufficient filesystem protection and a sensitive file in bootflash, allowing an authenticated PRIV15 user to overwrite an installer file and execute commands with root privileges. A successful exploit could read/write th...

CVE-2021-34724 Cisco IOS XE SD-WAN Software Privilege Escalation Vulnerability

A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to elevate privileges and execute arbitrary code on the underlying operating system as the root user. An attacker must be authenticated on an affected device as a PRIV15 user. This vulnerability i...

CVE-2021-34705 Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass Vulnerability

A vulnerability in the Voice Telephony Service Provider VTSP service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured destination patterns and dial arbitrary numbers. This vulnerability is due to insufficient validation of dial...

CVE-2021-34714

CVE-2021-34714 affects Cisco FXOS, IOS, IOS XE/XR, and NX-OS UDLD implementations. The root cause is improper input validation of UDLD packets, enabling an unauthenticated, adjacent attacker to trigger a device reload and DoS; on IOS XR the impact is limited to reloading the UDLD process. The vul...

CVE-2021-34723 Cisco IOS XE SD-WAN Software Arbitrary File Overwrite Vulnerability

A vulnerability in a specific CLI command that is run on Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the configuration database of an affected device. This vulnerability is due to insufficient validation of specific CLI command...

CVE-2021-34723

CVE-2021-34723 concerns Cisco IOS XE SD-WAN Software where an authenticated, local attacker can exploit a CLI command with crafted parameters to overwrite arbitrary files in the device’s configuration database, potentially gaining root-level access. The root cause is insufficient validation of ce...

CVE-2021-34703 Cisco IOS and IOS XE Software Link Layer Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Link Layer Discovery Protocol LLDP message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to improper initialization of a...

CVE-2021-34703

CVE-2021-34703 affects Cisco IOS and Cisco IOS XE Software via the LLDP message parser. The root cause is improper initialization of a buffer, enabling an attacker to trigger a device reload and cause a DoS by manipulating LLDP neighbor table data via CLI/SNMP, or by injecting LLDP frames. Docume...

CVE-2021-34699

Cisco IOS and IOS XE TrustSec CLI parser DoS (CVE-2021-34699) arises from an improper interaction between the Web UI and the TrustSec CLI parser, allowing an authenticated, remote attacker to cause an affected device to reload and trigger a DoS. The vulnerability affects Cisco IOS and IOS XE soft...

CVE-2021-34699 Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability

A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker could exploit this...

CVE-2021-34697

Cisco IOS XE Software contains a Denial of Service vulnerability in the Protection Against Distributed Denial of Service Attacks feature. The issue arises from incorrect handling of half-opened connections limit, TCP SYN flood limit, or TCP SYN cookie features when configured in vulnerable releas...

CVE-2021-1625 Cisco IOS XE Software Zone-Based Policy Firewall ICMP and UDP Inspection Vulnerability

A vulnerability in the Zone-Based Policy Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent the Zone-Based Policy Firewall from correctly classifying traffic. This vulnerability exists because ICMP and UDP responder-to-initiator flows are not...

CVE-2021-1625

Cisco CVE-2021-1625 affects the Zone-Based Policy Firewall in Cisco IOS XE Software. The issue arises because ICMP and UDP responder-to-initiator flows are not inspected when UTD or AppQoE is configured, enabling an unauthenticated remote attacker to inject traffic; resulting traffic may be dropp...

CVE-2021-1624 Cisco IOS XE Software Rate Limiting Network Address Translation Denial of Service Vulnerability

A vulnerability in the Rate Limiting Network Address Translation NAT feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization in the Cisco QuantumFlow Processor of an affected device, resulting in a denial of service DoS condition. This...

CVE-2021-1624

Cisco IOS XE Software contains a vulnerability in the Rate Limiting NAT feature that can be exploited remotely by sending large volumes of traffic, causing the QuantumFlow Processor to reach 100% utilization and resulting in a DoS. Root cause: mishandling of the rate limiting feature within the Q...

CVE-2021-1622 Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Common Open Policy Service Denial of Service Vulnerability

A vulnerability in the Common Open Policy Service COPS of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service DoS condition. This vulnerability is due to a deadlock conditi...

CVE-2021-1622 Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Common Open Policy Service Denial of Service Vulnerability

A vulnerability in the Common Open Policy Service COPS of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service DoS condition. This vulnerability is due to a deadlock conditi...

CVE-2021-1622

CVE-2021-1622 affects Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers, focusing on the Common Open Policy Service (COPS). The root cause is a deadlock in COPS packet processing that can be triggered under certain conditions, allowing an unauthenticated, remote attacker to cause ...

Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability

A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker could exploit this...

Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass Vulnerability

A vulnerability in the Voice Telephony Service Provider VTSP service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured destination patterns and dial arbitrary numbers. This vulnerability is due to insufficient validation of dial...