CVE-2018-0480 Cisco IOS XE Software Errdisable Denial of Service Vulnerability

A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service DoS condition. The vulnerability is due to a race condition that occurs when the VLAN and port enter an...

CVE-2018-15372 Cisco IOS XE Software MACsec MKA Using EAP-TLS Authentication Bypass Vulnerability

A vulnerability in the MACsec Key Agreement MKA using Extensible Authentication Protocol-Transport Layer Security EAP-TLS functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to bypass authentication and pass traffic through a Layer 3 interface of an affected...

CVE-2018-0481 Cisco IOS XE Software Command Injection Vulnerabilities

A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes command arguments, faili...

CVE-2018-0469 Cisco IOS XE Software Web UI Denial of Service Vulnerability

A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a double-free-in-memory handling by the affected software when specific HTTP requests are processed. An attacker...

CVE-2018-0197 Cisco IOS and IOS XE Software VLAN Trunking Protocol Denial of Service Vulnerability

A vulnerability in the VLAN Trunking Protocol VTP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to corrupt the internal VTP database on an affected device and cause a denial of service DoS condition. The vulnerability is due to a logic...

CVE-2018-15373 Cisco IOS and IOS XE Software Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the implementation of Cisco Discovery Protocol functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust memory on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to...

CVE-2018-0467

CVE-2018-0467 affects Cisco IOS and IOS XE IPv6 processing. The vulnerability stems from incorrect handling of specific IPv6 hop-by-hop options, which could allow an unauthenticated, remote attacker to cause the device to reload and trigger a DoS. Connected advisories confirm that Cisco has relea...

CVE-2018-0485 Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service Vulnerability

A vulnerability in the SM-1T3/E3 firmware on Cisco Second Generation Integrated Services Routers ISR G2 and the Cisco 4451-X Integrated Services Router ISR4451-X could allow an unauthenticated, remote attacker to cause the ISR G2 Router or the SM-1T3/E3 module on the ISR4451-X to reload, resultin...

CVE-2018-15372

Cisco IOS XE Software MACsec MKA using EAP-TLS authentication contains a logic error that can let an unauthenticated adjacent attacker pass traffic through a Layer 3 interface configured for MACsec MKA in access-session closed mode, bypassing 802.1x controls. Affected components, impact, and expl...

CVE-2018-15368

CVE-2018-15368 is Cisco IOS XE Software Privileged EXEC Mode Root Shell Access. The issue arises in the CLI parser: under authenticated local access (privilege level 15) an attacker can send crafted CLI commands that bypass argument sanitization and modify the underlying Linux filesystem, gaining...

CVE-2018-0466

CVE-2018-0466 affects Cisco IOS and IOS XE OSPFv3; vulnerability stems from incorrect handling of OSPFv3 packets, enabling an unauthenticated adjacent attacker to cause a device reload (DoS). Exploit vector is crafted OSPFv3 LSA packets. Remediation is upgrade to fixed Cisco releases per the Cisc...

CVE-2018-15368 Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability

A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected software improperl...

CVE-2018-15374

CVE-2018-15374 describes a digital signature verification bypass in the Cisco IOS XE Software Image Verification feature. An authenticated, local attacker could upload a legitimate-looking but malicious software image or file to an affected device, exploiting improper verification to bypass signa...

CVE-2018-0472

CVE-2018-0472 is a vulnerability in the Cisco IPsec driver code as described in ICSA-19-094-04, affecting Rockwell Automation Stratix 5950 security appliances. The issue is caused by improper processing/validation of malformed IPsec AH/ESP packets, allowing an unauthenticated remote attacker to c...

Cisco IOS XE Software Command Injection Vulnerabilities (cisco-sa-20180926-iosxe-cmdinj)

According to its self-reported version, the IOS XE is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco IOS XE Software Web UI DoS Vulnerability (cisco-sa-20180926-webuidos)

According to its self-reported version, the IOS XE is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco IOS XE Software IPsec DoS Vulnerability (cisco-sa-20180926-ipsec)

According to its self-reported version, the IOS XE is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco IOS XE Software Cluster Management Protocol DoS Vulnerability (cisco-sa-20180926-cmp)

According to its self-reported version, the IOS XE is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco IOS XE Software CDP Memory Leak DoS Vulnerability (cisco-sa-20180926-cdp-memleak)

According to its self-reported version, the IOS XE is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco IOS XE Software Errdisable Vulnerabilities (cisco-sa-20180926-errdisable)

According to its self-reported version, the IOS XE is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...