CVE-2014-2108

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...

Design/Logic Flaw

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...

Design/Logic Flaw

Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service I/O memory consumption and device reload via a malformed IPv6 packet, aka Bug ID CSCui59540...

CVE-2014-2108

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...

CVE-2014-2113

CVE-2014-2113 affects Cisco IOS/IOS XE where IPv6 packet processing can trigger a DoS via I/O memory depletion. Affected are Cisco IOS 15.1–15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8–3.10 before 3.10.2S. The vulnerability is triggered by malformed IPv6 packets and can c...

CVE-2014-2106

Cisco IOS 15.3M before 15.33M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCug45898...

CVE-2014-2106

CVE-2014-2106 affects Cisco IOS 15.3M before 15.3(3)M2 and IOS XE 3.10.xS before 3.10.2S. A crafted SIP message may cause the device to reload (DoS) on unauthenticated remote access. The issue is documented in Cisco advisory cisco-sa-20140326-sip; affected versions and mitigation are provided by ...

CVE-2014-2113

Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service I/O memory consumption and device reload via a malformed IPv6 packet, aka Bug ID CSCui59540...

Cisco IOS Software Crafted IPv6 Packet Denial of Service Vulnerability

A vulnerability in the implementation of the IP version 6 IPv6 protocol stack in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause I/O memory depletion on an affected device that has IPv6 enabled. The vulnerability is triggered when an affected...

Cisco IOS XE Software IP Device Tracking DoS

A vulnerability in the IP Device Tracking function in Cisco IOS XE could allow a remote, unauthenticated attacker to trigger a denial of service condition resulting in a reload of the device. It should be noted that while the vendor describes a possible workaround, this plugin does not test for t...

Cisco IOS XE Software TFTP DoS

A vulnerability in the flow manager code in Cisco IOS XE could allow a remote, unauthenticated attacker to trigger a denial of service condition resulting in a crash of the device by sending specially generated TFTP UDP traffic. It should be noted that this plugin merely checks for an affected IO...

CVE-2013-6981

Cisco IOS XE 3.7S.1 and earlier allows remote attackers to cause a denial of service Packet Processor crash via fragmented MPLS IP packets, aka Bug ID CSCul00709...

Command injection

Cisco IOS XE 3.7S.1 and earlier allows remote attackers to cause a denial of service Packet Processor crash via fragmented MPLS IP packets, aka Bug ID CSCul00709...

CVE-2013-6981

CVE-2013-6981 affects Cisco IOS XE (3.7S(.1) and earlier) where the MPLS IP fragmentation function can be exploited by unauthenticated, remote attackers sending specially crafted MPLS IP packets to crash the Cisco Packet Processor. Connected sources (Cisco Security Advisory CISCO-SA-20131224-CVE-...

Cisco IOS XE Software Telnet Authentication Bypass Vulnerability

A vulnerability in the vty authentication of Cisco IOS XE Software 03.02.xxSE and 03.03.xxSE only could allow an unauthenticated, remote attacker to access an affected device without authentication and perform actions on the device with the privileges configured for the vty line interface. The...

Cisco IOS XE Crafted MPLS IP Fragmentation Denial of Service Vulnerability

A vulnerability in the Multiprotocol Label Switching MPLS IP fragmentation function of Cisco IOS XE could allow an unauthenticated, remote attacker to cause the Cisco Packet Processor to crash. The vulnerability is due to input validation processing of the crafted MPLS IP packets. An attacker cou...

CVE-2013-6979

The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP address, aka Bug ID CSCuj90227...

CVE-2013-6979

CVE-2013-6979 affects Cisco IOS XE 03.02.xxSE and 03.03.xxSE. The VTY authentication check relies on the Linux-IOS internal-network config, allowing an unauthenticated, remote attacker to bypass authentication if their source address is in 192.168.x.2 and they have IP connectivity to the device. ...

Cisco IOS XE Software TFTP Denial of Service Vulnerability

A vulnerability in the flow manager code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause flow manager to hold UDP sessions in its table. The vulnerability is due to not releasing memory for flows generated by TFTP UDP traffic. An attacker could exploit this...

CVE-2013-6704

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service memory consumption via TFTP 1 client or 2 server traffic, aka Bug IDs CSCuh09324 and CSCty42686...