Cisco IOS XE NTP Packet Handling Remote DoS (cisco-sa-20160804-wedge)

According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability due to insufficient checks on clearing invalid Network Time Protocol NTP packets from the interface queue. An unauthenticated, remote...

Cisco IOS XE Software Border Gateway Protocol Message Processing DoS (cisco-sa-20160715-bgp)

The Cisco IOS XE Software running on the remote device is missing a security patch. It is, therefore, affected by a denial of service vulnerability in the Border Gateway Protocol BGP message processing functions due to improper processing of BGP attributes. An authenticated, remote attacker can...

Cisco IOS XE Software Border Gateway Protocol Message Processing Denial of Service Vulnerability

A vulnerability in Border Gateway Protocol BGP message processing functions of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of crafted BGP attributes. An attacker could exploit this...

Code injection

Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service device reload via crafted attributes in a BGP message, aka Bug ID CSCuz21061...

Sierra Wireless AirLink Raven XE/XT Unauthorized Access Vulnerability

The AirLink Raven XT and XE are M2M gateways from Sierra Wireless that provide remote monitoring and control of industrial applications. An unauthorized access vulnerability exists in AirLink Raven XT and XE. An unauthenticated, remote attacker could exploit the vulnerability to access system...

Sierra Wireless AirLink Raven XE/XT Credential Sniffing Vulnerability

The AirLink Raven XT and XE are M2M gateways from Sierra Wireless that provide remote monitoring and control of industrial applications. A credential sniffing vulnerability exists in AirLink Raven XT and XE. An attacker can exploit the vulnerability to sniff credentials and log into the system...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

Cisco IOS software contains vulnerabilities in the Secure Shell SSH services and Cisco IOS XE software. When these services are operated, a “disruption of service” can be triggered by sending specially crafted SSH requests...

Cisco IOS-XE Zone-Based Firewall Feature Security Bypass (CSCun96847)

According to its self-reported version, the Cisco IOS-XE software running on the remote device is affected by a security bypass vulnerability in the Zone-Based Firewall feature due to insufficient zone checking for traffic belonging to existing sessions. An unauthenticated, remote attacker can...

CVE-2016-1428

Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service device restart via a sequence of crafted SNMP read requests, aka Bug ID CSCux13174...

Double free

Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service device restart via a sequence of crafted SNMP read requests, aka Bug ID CSCux13174...

CVE-2016-1428

CVE-2016-1428 is a Cisco IOS XE SNMP subsystem vulnerability described as a double‑free error in the SNMP processing path. According to sources, it affects Cisco IOS XE releases 3.15S, 3.16S, and 3.17S and can be exploited by an authenticated, remote attacker via crafted SNMP read requests to tri...

Sierra Wireless AirLink Raven XE Industrial 3G Gateway CSRF / File Upload

Sierra Wireless AirLink Raven XE Industrial 3G Gateway - Multiple Vulnerabilities About http://www.sierrawireless.com/products-and-solutions/gateway-solutions/raven-series/ Rugged Design and Advanced Security for Fixed and Portable Wireless Communication Raven XE/XT Compact design for industrial...

CVE-2016-1428

Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service device restart via a sequence of crafted SNMP read requests, aka Bug ID CSCux13174...

Cisco IOS XE libsrtp DoS (CSCux04317)

The remote Cisco IOS XE device is missing vendor-supplied security patches, and it is configured to use the Cisco Unified Border Element CUBE or Session Border Controller SBC features. It is, therefore, affected by an integer underflow condition in the Secure Real-Time Transport Protocol SRTP...

Cisco IOS and Cisco IOS XE Software TCP Denial of Service Vulnerability

A vulnerability in the handling of remote TCP connections in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to low memory. The vulnerability is due to the handling of out-of-order, or otherwise invalid, TC...

CVE-2016-1432

Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service NULL pointer dereference and card restart via a crafted SNMP request, aka Bug ID CSCuu68862...

Null pointer dereference

Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service NULL pointer dereference and card restart via a crafted SNMP request, aka Bug ID CSCuu68862...

CVE-2016-1432

Cisco IOS XE on Cisco cBR-8 Converged Broadband Router (IOS XE 3.15S and 3.16S) is affected by CVE-2016-1432. A remote, authenticated attacker can trigger a denial of service by sending crafted SNMP requests that cause a NULL pointer dereference, leading to a supervisor card restart. The root cau...

Cisco Products IPv6 Neighbor Discovery Crafted Packet Denial of Service Vulnerability (IOS XE)

A vulnerability in the IP Version 6 IPv6 packet processing functions of Cisco IOS XR Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to stop processing IPv6 traffic, leading to a denial of service DoS condition ...

CVE-2016-1409

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service packet-processing outage via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in Ma...