Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2015-08466)

Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in Cisco IOS XE Software. An attacker could exploit this vulnerability to cause affected devices to reload and deny service to legitimate users...

Design/Logic Flaw

Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service device reload via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405...

CVE-2015-6431

Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service device reload via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405...

CVE-2015-6431

Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service device reload via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405...

CVE-2015-6431

CVE-2015-6431 affects Cisco IOS XE 16.1.1 and relates to denial of service via a frame with a source MAC address of all zeros (0000:0000:0000). An unauthenticated, adjacent attacker can trigger a device reload by sending such packets, described in Cisco’s CSCux48405 advisory and related Nessus en...

Cisco IOS XE Software Packet Processing Denial of Service Vulnerability

Cisco IOS XE Software Release 16.1.1 contains a vulnerability that could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to incorrect processing of packets that have a source MAC address of 0000:0000:0000. An attacker could exploit this...

Design/Logic Flaw

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service IPsec connection termination via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236...

CVE-2015-6429

Cisco IOS/IOS XE (12.x) IKEv1 state machine vulnerability (CVE-2015-6429): insufficient condition checks in the IKEv1 state machine allow unauthenticated remote attackers to tear down IPsec tunnels, causing a partial DoS. Affected: IOS 15.4–15.6 and IOS XE 3.15–3.17. Exploitation: remote, via spo...

CVE-2015-6429

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service IPsec connection termination via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236...

Cisco IOS XE Software IPv6 Neighbor Discovery DoS (CSCup28217)

The remote Cisco IOS XE device is missing a vendor-supplied security patch, and is not configured to limit the IPv6 neighbor discovery ND cache. It is, therefore, affected by a denial of service vulnerability due to insufficient bounds on internal tables. An unauthenticated, adjacent attacker can...

Cisco ASR 1000 IOS XE安全绕过漏洞

漏洞详情： CVE ID CVE-2015-6383 漏洞描述 Cisco IOS XE on ASR 1000是美国思科（Cisco）公司的一套运行于ASR 1000系列路由器设备中的操作系统。 Cisco ASR 1000设备上的IOS XE 15.43S版本中存在安全漏洞，由于程序未能正确加载软件程序包。本地攻击者可通过使用命令行输入特制的文件名，利用该漏洞绕过许可限制，获取root权限。 参考链接 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-6383...

CVE-2015-6383

Cisco IOS XE 15.43S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130...

CVE-2015-6383

Cisco IOS XE 15.4(3)S on ASR 1000 devices is affected by CVE-2015-6383 due to improper loading of software packages. A local attacker (no authentication required beyond local access) can craft filenames via the CLI to bypass license restrictions and gain root privileges. Root cause: failure to lo...

Cisco ASR 1000 Series Root Shell License Bypass Vulnerability

A vulnerability in the way software packages are loaded in Cisco IOS XE Software for the Cisco Aggregation Services Routers ASR 1000 Series could allow an authenticated, local attacker to gain restricted root shell access. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be...

Cisco IOS XE 3S Platforms Series root Shell License Bypass Vulnerability

A vulnerability in one of the diagnostic commands in the Cisco IOS XE operating system for Cisco IOS XE 3S platforms could allow an authenticated, privileged, local attacker to gain restricted root shell access. The root shell is provided for advanced troubleshooting with Cisco Technical Assistan...

Cisco IOS / Cisco IOS XE multiple security vulnerabilities

Authentication bypass, DoS...

Cisco IOS XE Network Address Translation and Multiprotocol Label Switching DoS (CSCut96933)

The remote Cisco IOS XE device is missing vendor-supplied security patches, and is configured for Network Address Translation NAT and/or Multiprotocol Label Switching MPLS. It is, therefore, affected by a flaw in the NAT and MPLS services due to improper processing of IPv4 packets. An...

Cisco IOS XE IPv6 Snooping DoS (cisco-sa-20150923-fhs)

The remote Cisco IOS XE device is missing vendor-supplied security patches, and is configured for IPv6 snooping. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the IPv6 Snooping feature due to missing Control Plane Protection CPPr protection mechanisms. An...

Cisco IOS XE SSHv2 RSA-Based User Authentication Bypass (CSCus73013)

The remote Cisco IOS XE device is missing a vendor-supplied security patch, and is configured for SSHv2 RSA-based user authentication. It is, therefore, affected by a flaw in the SSHv2 protocol implementation of the public key authentication method. An unauthenticated, remote attacker can exploit...

CVE-2015-6280

The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote...