The vulnerability of the Cisco IOS XE operating system’s web interface, related to code errors, allows attackers to circumvent existing access restrictions.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions remotely...

The vulnerability of the Role-Based Access Control (RBAC) implementation in the Cisco IOS XE operating system allows a perpetrator to increase their privileges and execute arbitrary code.

The vulnerability of the Role-Based Access Control RBAC implementation in the Cisco IOS XE operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

Cisco IOS XE Software Web UI Command Injection (cisco-sa-web-cmdinj3-44st5CcA)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. Please see the included Cisco BID and Cisco Security Advisory for more information. TRUSTED...

Cisco IOx for IOS XE Software Privilege Escalation (cisco-sa-ioxPE-KgGvCAf9)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the authorization controls for the Cisco IOx application hosting infrastructure due to incorrect handling of requests for authorization tokens. An unauthenticated, remote attacker can exploit this, by...

Cisco IOS XE Software Web UI Command Injection Vulnerability (cisco-sa-web-cmdinj4-S2TmH7GA)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco IOS XE Software Web UI Command Injection (cisco-sa-webui-cmdinj-zM283Zdw)

According to its self-reported version, Cisco IOS XE Software is affected by a Web UI Command Injection vulnerability. The vulnerability exists in the web-based user interface due to improper validation of specific HTTP requests. An authenticated, remote attacker can exploit this, to inject IOS...

Cisco IOS XE Software Secure Shell DoS (cisco-sa-ssh-dos-Un22sd2A)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the Secure Shell SSH server code due to an internal state not being represented correctly in the SSH state machine, which leads to an unexpected behavior. An authenticated, remote attacker can exploit...

Cisco IOS XE Software Digital Signature Verification Bypass (cisco-sa-iosxe-digsig-bypass-FYQ3bmVq)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability due to an improper check on the area of code that manages the verification of the digital signatures of system image files during the initial boot process. An attacker could exploit this vulnerability by...

Cisco IOS XE Software Web UI RCE (cisco-sa-iosxe-webui-rce-uk8BXcUD)

According to its self-reported version, Cisco IOS XE Software is affected by a remote code execution vulnerability. An authenticated, remote attacker can exploit this, by supplying improperly validated input, to execute arbitrary code with root privileges on the underlying Linux shell. Please see...

Cisco IOS XE Software Input Validation Error Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. An input validation error vulnerability exists in the Web UI in Cisco IOS XE Software, which arises from the program not properly validating user input. An attacker could exploit t...

Cisc IOS XE SD-WAN Software License Issue Vulnerability

Cisco IOS and IOS XE are both products of Cisco. the CLI is one of the command-line interfaces. the SD-WAN Software is one of the software-defined WAN software packages. An authorization issue vulnerability exists in Cisco IOS XE SD-WAN Software versions 16.9.1 through 16.10.1, which stems from a...

Cisco Catalyst 9800 Series Wireless Controllers IOS XE Software Resource Management Error Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A resource management error vulnerability exists in the LSC provisioning feature of the IOS XE Software in Cisco Catalyst 9800 Series Wireless Controllers, which stems from the...

Cisco IOS XE Software Privilege License and Access Control Issues Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A privilege permission and access control issue vulnerability exists in ROMMON in Cisco IOS XE Software. An attacker can exploit this vulnerability by sending parameters to elevate...

CVE-2020-3229

A vulnerability in Role Based Access Control RBAC functionality of Cisco IOS XE Web Management Software could allow a Read-Only authenticated, remote attacker to execute commands or configuration changes as an Admin user. The vulnerability is due to incorrect handling of RBAC for the administrati...

CVE-2020-3225

Multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilities a...

CVE-2020-3222

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to bypass access control restrictions on an affected device. The vulnerability is due to the presence of a proxy service at a specific endpoint of the web UI. An...

CVE-2020-3223

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope limiting. An attacke...

CVE-2020-3221

A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper...

CVE-2020-3229

A vulnerability in Role Based Access Control RBAC functionality of Cisco IOS XE Web Management Software could allow a Read-Only authenticated, remote attacker to execute commands or configuration changes as an Admin user. The vulnerability is due to incorrect handling of RBAC for the administrati...

CVE-2020-3223

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope limiting. An attacke...