CVE-2014-3405

Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks aka RPL on both the Autonomic Control Plane ACP and external Autonomic Networking Infrastructure ANI interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an AN...

CVE-2014-3404

Cisco IOS XE's Autonomic Networking Infrastructure (ANI) has a certificate validation vulnerability (CVE-2014-3404) due to incomplete certificate validation in the ANI component. A remote attacker could send crafted messages to the ANI device and cause acceptance of an invalid message. The Cisco ...

CVE-2014-3403

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647...

CVE-2014-3404

The Autonomic Networking Infrastructure ANI component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid message via crafted messages, aka Bug ID CSCuq22677...

CVE-2014-3403

The CVE-2014-3403 issue affects Cisco IOS XE Autonomic Networking Infrastructure (ANI). The vulnerability arises from incomplete certificate validation in ANI, enabling a remote attacker to spoof devices by sending crafted messages. The Cisco security advisory describes this as a certificate-vali...

CVE-2014-3405

Summary: Cisco IOS XE’s Autonomic Networking Infrastructure (ANI) and Autonomic Control Plane (ACP) run the IPv6 RPL protocol. The vulnerability allows an unauthenticated, adjacent attacker to inject routes via crafted RPL advertisements on the ANI interface, potentially impacting routing in the ...

Cisco IOS XE Software Multiple IPv6 Metadata Flow Vulnerabilities (cisco-sa-20140924-metadata)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by two vulnerabilities in the IPv6 metadata flow feature due to improper handling of RSVP packets. A remote attacker can exploit this issue by sending specially crafted RSVP flows to cause t...

Cisco IOS XE Software DHCPv6 DoS (cisco-sa-20140924-dhcpv6)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the DHCP version 6 DHCPv6 implementation due to improper handling of DHCPv6 packets. A remote attacker can exploit this issue by sending specially...

Cisco IOS XE Software RSVP DoS (cisco-sa-20140924-rsvp)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the Resource Reservation Protocol RSVP implementation due to improper handling of RSVP packets. A remote attacker can exploit this issue by sending...

Cisco IOS XE Software Multiple mDNS Gateway DoS Vulnerabilities (cisco-sa-20140924-mdns)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by two unspecified denial of service vulnerabilities in the multicast DNS mDNS implementation. A remote attacker can exploit this issue by sending a specially crafted mDNS packet to cause th...

Cisco IOS XE Software SIP DoS (cisco-sa-20140924-sip)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a vulnerability in the Session Initiation Protocol SIP implementation due to improper handling of SIP messages. A remote attacker can exploit this issue by sending specially crafted SIP...

CVE-2014-3355

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCug75942...

CVE-2014-3357

Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allow remote attackers to cause a denial of service device reload via malformed mDNS packets, aka Bug ID CSCul90866...

CVE-2014-3356

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCue22753...

CVE-2014-3354

Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service device reload via malformed RSVP...

Code injection

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCue22753...

Design/Logic Flaw

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCug75942...

Command injection

Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allow remote attackers to cause a denial of service device reload via malformed mDNS packets, aka Bug ID CSCul90866...

Memory corruption

Memory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and 3.11.xS before 3.12S allows remote attackers to cause a denial of service memory consumption or device reload via malformed DHCPv6 packets, aka B...

Design/Logic Flaw

Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service device reload via malformed RSVP...