CVE-2015-0632

CVE-2015-0632 concerns Cisco IOS and IOS XE with a race condition in the Neighbor Discovery (ND) protocol. This vulnerability could allow remote attackers on the local network to cause a denial of service by flooding Router Solicitation messages. The affected components are Cisco IOS/IOS XE’s ND ...

Cisco IOS XE LISP ITR DoS (CSCun73782)

The remote Cisco device is potentially affected by an issue related to the handling of certain parameters in Locator/ID Separation Protocol LISP control messages sent to the ingress tunnel router ITR component. A remote, unauthenticated attacker could exploit this issue by sending specially craft...

Cisco IOS XE Crafted MPLS IP Fragmentation DoS (CSCul00709)

According to its self-reported version, the remote IOS XE device is affected by a denial of service vulnerability. A denial of service flaw exists the Multiprotocol Label Switching MPLS IP fragmentation function of Cisco XE. An unauthenticated, remote attacker with a specially crafted MPLS IP...

CVE-2014-7990

Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, which allows local users to obtain Linux root access by leveraging administrative privilege, aka Bug ID CSCur09815...

Command injection

Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, which allows local users to obtain Linux root access by leveraging administrative privilege, aka Bug ID CSCur09815...

CVE-2014-7990

Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, which allows local users to obtain Linux root access by leveraging administrative privilege, aka Bug ID CSCur09815...

CVE-2014-7990

Cisco IOS XE vulnerability CVE-2014-7990 affects the 3.5E and earlier releases on WS-C3850, WS-C3860, and AIR-CT5760 platforms. The issue stems from improper parsing of the "+request system shell" challenge response, enabling an authenticated local attacker with administrative privilege to obtain...

Cisco IOS XE Software Connectivity Fault Management (CFM) DoS

The remote Cisco device is affected by a denial of service vulnerability due to due to improper parsing of malformed Ethernet Connectivity Fault Management CFM packets. A remote, unauthenticated attacker, using specially crafted CFM packets, could trigger a denial of service condition, resulting ...

Cisco IOS XE Software Challenge/Response Bypass Vulnerability

A vulnerability in the request system shell command supported by specific Cisco IOS XE platforms WS-C3850, WS-C3650, AIR-CT5760, and WS-C4500X could allow an authenticated, local attacker with administrative privilege 15 to access the underlying Linux root shell. The vulnerability is due to...

Cisco IOS XE OSPF Opaque LSA DoS (CSCui21030)

The remote Cisco device is affected by a denial of service vulnerability due to improper parsing of certain options in OSPF link-state advertisement LSA type 11 packets. A remote, unauthenticated attacker, using specially crafted OSPF packets with unusual options can cause a device reload,...

Cisco IOS XE IP Header Sanity Check DoS (CSCuj23992)

According to its self-reported version, the remote IOS XE device is affected by a denial of service vulnerability in the Cisco Express Forwarding processing module. The issue is due to improper processing of MPLS packets. When certain additional features are configured, an attacker can exploit th...

CVE-2014-3409

Cisco IOS 12.2(33)SRE9a and earlier, and IOS XE 3.13S and earlier are affected by CVE-2014-3409 due to improper parsing in the Ethernet Connectivity Fault Management (CFM) handling feature. A remote, unauthenticated attacker can craft malformed CFM packets to trigger a denial-of-service, causing ...

Cisco IOS XE Software Autonomic Networking Infrastructure Routing Protocol for Low-Power and Lossy Networks Vulnerability

A vulnerability in the IPv6 Routing Protocol for Low-Power and Lossy Networks RPL of Cisco IOS XE could allow an unauthenticated, adjacent attacker to inject routes into the autonomic control plane ACP. The vulnerability is due to RPL being active on ACP as well as the external Autonomic Networki...

Cisco IOS XE Software Autonomic Networking Infrastructure Certificate Validation Vulnerability

A vulnerability in certificate validation for Autonomic Networking Infrastructure ANI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to masquerade as another device. The vulnerability is due to incomplete certificate validation. An attacker could exploit this vulnerabili...

Cisco IOS XE Software Autonomic Networking Infrastructure Certificate Chain Validation Vulnerability

A vulnerability in certificate validation for Autonomic Network Infrastructure ANI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to provide an invalid message and have the ANI device accept it. The vulnerability is due to incomplete certificate validation. An attacker...

CVE-2014-3403

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647...

CVE-2014-3404

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid message via crafted messages, aka Bug ID CSCuq22677...

Design/Logic Flaw

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid message via crafted messages, aka Bug ID CSCuq22677...

Design/Logic Flaw

Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks aka RPL on both the Autonomic Control Plane ACP and external Autonomic Networking Infrastructure ANI interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an AN...

Design/Logic Flaw

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647...