Cisco IOS XE Software, Catalyst, and NGWC GUI Privilege Escalation (cisco-sa-20170927-ngwc)

According to its self-reported version, Cisco IOS XE Software is affected by a privilege escalation vulnerability in the web-based Wireless Controller GUI for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engine 8-E Wireless Switches, and Cisco New Generation Wireless...

Cisco IOS XE Software Smart Install DoS (cisco-sa-20180328-smi)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Smart Install feature due to improper validation of packet data. An unauthenticated, remote attacker can exploit this by sending a crafted packet to an affected device on TCP...

Cisco IOS XE Software OSPF LSA Manipulation (cisco-sa-20170727-ospf)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. An unauthenticated, remote attacker can exploit this, by injecting crafted OSPF LSA type 1 packets, to...

Cisco IOS XE Software Autonomic Networking Infrastructure DoS (cisco-sa-20170726-anidos)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Autonomic Networking feature. An unauthenticated, adjacent attacker can exploit this by replaying captured packets to reset the Autonomic Control Plane ACP channel of an...

Cisco IOS XE Wireless Controller Manager DoS (cisco-sa-20170927-ios-xe)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability due to insufficient input validation in the wireless controller manager. An unauthenticated, adjacent attacker can exploit this, by submitting a crated association request, to cause...

Cisco IOS XE Software AAA Login DoS (cisco-sa-20160928-aaados)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Authentication, Authorization, and Accounting AAA service for remote Secure Shell Host SSH connection. An unauthenticated, remote attacker can exploit this, by attempting to...

Cisco IOS XE Software Zone-Based Firewall IP Fragmentation DoS (cisco-sa-20180328-fwip)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the Zone-Based Firewall due to the way fragmented packets in the firewall code. An unauthenticated, remote attacker can exploit this by sending fragmented IP Version 4 or IP Version 6 packets through a...

Cisco IOS XE Software Autonomic Networking Infrastructure Certificate Revocation (cisco-sa-20170726-anicrl)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the Autonomic Networking feature because the affected software does not transfer certificate revocation lists CRLs across Autonomic Control Plane ACP channels. An unauthenticated, remote attacker can...

Cisco IOS XE Software Web UI Remote Access Privilege Escalation (cisco-sa-20180328-xepriv)

According to its self-reported version, Cisco IOS XE Software is affected by a privilege escalation vulnerability in the web-based user interface web UI. This vulnerability exists because the affected software does not reset the privilege level for each web UI session. An authenticated, remote...

Cisco IOS XE Software Autonomic Control Plane Channel Information Disclosure (cisco-sa-20170726-aniacp)

According to its self-reported version, Cisco IOS XE Software is affected by an information disclosure vulnerability in the Autonomic Networking feature due to unknown reasons. An unauthenticated, adjacent attacker can exploit this by capturing and replaying Autonomic Control Plane ACP packets th...

Cisco IOS XE Software IP Fragment Reassembly DoS (cisco-sa-20160928-frag)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the IPv4 fragment reassembly function due to the corruption of an internal data structure that occurs when the affected software reassembles an IPv4 packet. An unauthenticated,...

Cisco IOS XE Software IP Detail Record DoS (cisco-sa-20160928-ipdr)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the IP Detail Record IPDR due to improper handling of IPDR packets. An unauthenticated, remote attacker can exploit this, by sending crafted IPDR packets, to cause the device to...

Cisco IOS XE Software H.323 Message Validation DoS (cisco-sa-20160928-h323)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the H.323 subsystem due to a failure to properly validate certain fields in an H.323 protocol suite message. An unauthenticated, remote attacker may exploit this, by sending a malicious message, causin...

Cisco IOS XE Software NAT DoS (cisco-sa-20160928-esp-nat)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the implementation of Network Address Translation NAT functionality due to improper handling of malformed ICMP packets by the affected software. An unauthenticated, remote attacke...

Cisco IOS XE Software Smart Install Memory Leak (cisco-sa-20160928-smi)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Smart Install client feature due to incorrect handling of image list parameters. An unauthenticated, remote attacker can exploit this, by sending crafted Smart Install packets...

Cisco NX-OS Border Gateway Protocol DoS (cisco-sa-20161005-bgp)

According to its self-reported version, a denial of service DoS vulnerability exists in the Border Gateway Protocol BGP implementation of Cisco NX-OS System Software due to incomplete input validation of BGP update messages. An unauthenticated, remote attacker can exploit this issue, by sending a...

Cisco IOS XE Software Change of Authorization DoS (cisco-sa-20190925-tsec)

A denial of service DoS vulnerability exists in the RADIUS Change of Authorization CoA code of Cisco TrustSec within Cisco IOS XE software due to improper handling of malformed packet. An unauthenticated, remote attacker can exploit this issue, via sending a malformed packet to an affected device...

Cisco IOS XE Software Stored Banner XSS (cisco-sa-20190925-sbxss)

According to its self-reported version, Cisco IOS XE Software is affected by a cross-site scripting vulnerability which allows an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of the affected software using the banner...

Cisco IOS XE Software IOx Guest Shell Namespace Protection Vulnerability (cisco-sa-20190925-iox-gs)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the filesystem which allows an authenticated, local attacker within the IOx Guest Shell to modify the namespace container protections on an affected device. The vulnerability is due to insufficient fil...

Cisco IOS XE Software Filesystem Exhaustion Denial of Service Vulnerability

A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resources on an affected device and cause a denial of service DoS condition. The vulnerability is due to ineffective management of the underlyi...