Cisco IOS XE Software Web UI Authorization Bypass (cisco-sa-webui-auth-bypass-6j2BYUc7)

According to its self-reported version, Cisco IOS XE Software is affected by a Web UI authorization bypass vulnerability due to insufficient authorization of web UI access requests. An authenticated, remote attacker could exploit this vulnerability by sending a crafted HTTP request to the web UI....

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43446)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the DHCP message handler of the Cisco IOS XE used by the Cisco cBR-8 Converged Broadband Router, which can be exploited by an attacker ...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43453)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in Cisco IOS XE's Control and Configuration of Access Points over Wireless CAPWAP protocol processing used by the Cisco Catalyst 9800 seri...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43449)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in the WLAN local analysis feature of Cisco IOS XE used in the Cisco Catalyst 9000 series, which can be exploited by an attacker to cause...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43440)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in Cisco IOS XE, which can be exploited by an attacker to cause the device to reload by sending Ethernet frames to the Ethernet segment...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43454)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in Cisco IOS XE's Control and Configuration of Access Points over Wireless CAPWAP protocol processing used by Cisco Catalyst 9800 series...

Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2021-43439)

Cisco IOS and IOS XE are both operating systems developed by Cisco in the United States for its network devices. A denial of service vulnerability exists in the PROFINET feature of Cisco IOS and IOS XE, which can be exploited by an attacker to cause the device to crash and reload by sending...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43451)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in Cisco IOS XE's Control and Configuration of Access Points over Wireless CAPWAP protocol processing used by the Cisco Catalyst 9800 seri...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43452)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in Cisco IOS XE's Control and Configuration of Access Points over Wireless CAPWAP protocol processing used by the Cisco Catalyst 9800 seri...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43445)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in the wireless client Simple Network Management Protocol SNMP trap generation of the Cisco IOS XE used by the Cisco Catalyst 9000 series,...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43441)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in the Umbrella Connector component of Cisco IOS XE used in Cisco Catalyst 9200 series switches, which can be exploited by an attacker by...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43457)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in the Common Open Policy Services COPS engine of Cisco IOS XE used by the Cisco cBR-8 Converged Broadband Router, which can be exploited ...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43456)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in the packet processing of Cisco IOS XE used by the Cisco 4461 Integrated Multiservice Router, which can be exploited by an attacker to...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43450)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the RESTCONF and NETCONF-YANG access control list ACL functions of Cisco IOS XE, which can be exploited by an attacker to cause the...

Cisco IOS XE Arbitrary Code Execution Vulnerability (CNVD-2021-43443)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An arbitrary code execution vulnerability exists in the initialization routines of Cisco IOS XE used by Cisco ASR 900 Series Aggregation Services Routers, which can be exploited b...

Cisco IOS XE Arbitrary Code Execution Vulnerability (CNVD-2021-43442)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An arbitrary code execution vulnerability exists in the initialization routines of Cisco IOS XE used by the Cisco ASR 900 Series Aggregation Services Routers, which can be exploit...

Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2021-43447)

Cisco IOS and IOS XE are both operating systems developed by Cisco in the United States for its network devices. A denial of service vulnerability exists in the PROFINET handler for Link Layer Discovery Protocol LLDP messages in Cisco IOS and IOS XE, which can be exploited by an attacker to cause...

CVE-2020-3516

A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web server on the device. The vulnerability is due to insufficient input validation during authentication. An attacker could exploit this vulnerability by entering...

CVE-2020-3524

A vulnerability in the Cisco IOS XE ROM Monitor ROMMON Software for Cisco 4000 Series Integrated Services Routers, Cisco ASR 920 Series Aggregation Services Routers, Cisco ASR 1000 Series Aggregation Services Routers, and Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated,...

CVE-2020-3526

A vulnerability in the Common Open Policy Service COPS engine of Cisco IOS XE Software on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to crash a device. The vulnerability is due to insufficient input validation. An attacker could exploit this...