Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector DoS (cisco-sa-iosxe-umbrella-dos-t2QMUX37)

According to its self-reported version, IOS-XE is affected by a DoS vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches due to insufficient error handling when parsing DNS requests. An unauthenticated, remote attacker could exploit th...

Cisco IOS XE Software for cBR 8 Converged Broadband Routers DHCP DoS (cisco-sa-iosxe-dhcp-dos-JSCKX43h)

According to its self-reported version, IOS-XE is affected by a DoS vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers due to insufficient error handling when DHCP version 4 DHCPv4 messages are parsed. An unauthenticated, remote attacker...

Cisco IOS XE Software ISDN Q.931 DoS (cisco-sa-iosxe-isdn-q931-dos-67eUZBTf)

According to its self-reported version, IOS-XE is affected by a DoS vulnerability in the ISDN subsystem due to insufficient input validation when the ISDN Q.931 messages are processed. An unauthenticated, adjacent attacker could exploit this vulnerability by sending a malicious ISDN Q.931 message...

Cisco IOS XE Software for ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution (cisco-sa-iosxe-rsp3-rce-jVHg8Z7c)

According to its self-reported version, IOS-XE for Cisco ASR 900 Series Aggregation Services Routers is affected by multiple vulnerabilities due to incorrect validations by boot scripts when specific ROM monitor ROMMON variables are set. An authenticated, local attacker with high privileges to...

Cisco IOS XE Software for Catalyst 9800 Series DoS (cisco-sa-iosxe-wlc-fnfv9-EvrAQpNX)

According to its self-reported version, Cisco IOS XE Software is affected by a DoS vulnerability in the Flexible NetFlow Version 9 packet processor due to insufficient validation of certain parameters in a Flexible NetFlow Version 9 record. An unauthenticated, remote attacker could cause a DoS...

The vulnerability of Cisco IOS and Cisco IOS XE operating systems, a component of PROFINET, allows a hacker to trigger a service failure.

The vulnerability of the PROFINET protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Cisco IOS XE operating system, related to insufficient checking of unusual or exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability in the implementation of Integrated Services Digital Network (ISDN) operating systems such as Cisco IOS and Cisco IOS XE allows a attacker to induce a service failure.

The vulnerability of Cisco IOS and Cisco IOS XE operating systems for ISDN Integrated Services Digital Network implementations is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the Cisco IOS XE operating system, related to insufficient checking of unusual or exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the RESTCONF and NETCONF-YANG protocols implemented in the Cisco IOS XE operating system allows a attacker to cause service interruptions.

The vulnerability of the RESTCONF and NETCONF-YANG protocols implemented by the Cisco IOS XE operating system is related to errors in pointer arithmetic. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco IOS XE Software Catalyst 9000 Family SNMP Trap DoS (cisco-sa-iosxe-ewlc-snmp-dos-wNkedg9K)

According to its self-reported version, IOS XE Software is affected by a DoS vulnerability in the Simple Network Management Protocol SNMP trap generation for wireless clients due to the lack of input validation of the information used to generate an SNMP trap in relation to a wireless client...

Cisco IOS XE Software MP BGP EVPN DoS (cisco-sa-ios-bgp-evpn-dos-LNfYJxfF)

According to its self-reported version, IOS-XE is affected by a denial of service DoS vulnerability in the Multiprotocol Border Gateway Protocol MP-BGP for the Layer 2 VPN L2VPN Ethernet VPN EVPN address family. An unauthenticated, remote attacker can exploit this, by sending BGP update messages...

Cisco IOS XE Software Command Injection Vulnerability (cisco-sa-iosxe-cmdinj-2MzhjM6K)

According to its self-reported version, Cisco IOS XE Software is affected by a command injection vulnerability. The vulnerability is due to insufficient protection of values passed to a script that executes during device startup. An attacker could exploit this vulnerability by writing values to a...

Cisco IOS XE Software Split DNS DoS (cisco-sa-splitdns-SPWqpdGW)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability as the Split DNS feature's regular expression regex engine may time out when processing the DNS name list configuration. An unauthenticated, remote attacker could cause an affected...

Cisco IOS XE Software Web Management Framework Multiple Vulnerabilities (cisco-sa-ios-xe-webui-multi-vfTkk7yr)

Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service DoS...

Cisco IOS XE Software Arbitrary Code Execution Vulnerability (cisco-sa-xbace-OnCEbyS)

According to its self-reported version, Cisco IOS XE Software is affected by a arbitrary code execution vulnerability, due to incorrect validations by boot scripts when specific ROM monitor ROMMON variables are set. An authenticated, local attacker could exploit this vulnerability by installing...

Cisco IOS XE Software Guest Shell Unauthorized File System Access (cisco-sa-unauth-file-access-eBTWkKVW)

According to its self-reported version, Cisco IOS XE Software is affected by an unauthorized file system access vulnerability in its guest shell component due to insufficient file system permissions. An authenticated, local attacker could exploit this, to view or modify restricted information or...

Cisco IOS XE Software Information Disclosure (cisco-sa-info-disclosure-V4BmJBNF)

According to its self-reported version, IOS XE is affected by a information disclosure vulnerability. An authenticated, local attacker to access files from the flash: filesystem due to insufficient application of restrictions during the execution of a specific command. Please see the included Cis...

Cisco IOS XE Software Privilege Escalation Multiple Vulnerabilities (cisco-sa-ios-webui-priv-esc-K8zvEWM)

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges on an affected device. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco IOS XE Software Arbitrary Code Execution (cisco-sa-ios-lua-rce-7VeJX4f)

According to its self-reported version, Cisco IOS XE Software is affected by an arbitrary code execution vulnerability in its Lua interpreter due to insufficient permission checks on Lua function calls. An authenticated, local attacker can exploit this to bypass authentication and execute arbitra...