CVE-2018-0188: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based user interface web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation...

CVE-2018-0196: Improper Input Validation

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to write arbitrary files to the operating system of an affected device. The vulnerability is due to insufficient input validation of HTTP requests that are sent to the web...

PT-2018-1183

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A vulnerability in the Forwarding Information Base FIB code could allow an unauthenticated, network attacker to cause a denial of service DoS condition. T...

CVE-2018-0151

A vulnerability in the quality of service QoS subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code with elevated privileges. The vulnerability is due to incorrect bounds...

CVE-2018-0173

A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 DHCPv4 packets could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a Relay Reply denial of service DoS...

CVE-2018-0186: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based user interface web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation...

CVE-2018-0176: Improper Neutralization of Special Elements used in an OS Command

Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerabilities are due to the affected softwa...

CVE-2018-0159

A vulnerability in the implementation of Internet Key Exchange Version 1 IKEv1 functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is...

CVE-2018-0171

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition, or to execute arbitrary code on an affected device. The...

PT-2018-1191

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions prior to the fixed version Description The issue is related to the web-based user interface of Cisco IOS XE Software, where a vulnerability exists due to the software not resetting the privilege level for each we...

PT-2018-1185

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and...

PT-2018-1186

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and...

PT-2018-8661

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Cisco IOS XE Software REST API could allow an authenticated, remote attacker to bypass API authorization checks and use the API to perform privileged...

PT-2018-8657

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based user interface of Cisco IOS XE Software, allowing an unauthenticated, remote attacker to conduct a cross-site...

PT-2018-1184

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description The issue is related to multiple vulnerabilities in the CLI parser of Cisco IOS XE Software. These vulnerabilities could allow an authenticated, local attacker to inject arbitra...

PT-2018-1187

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description The issue is related to multiple vulnerabilities in the CLI parser of Cisco IOS XE Software. These vulnerabilities could allow an authenticated, local attacker to inject arbitra...

PT-2018-8647

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software versions Everest-16.4.1 through Everest-16.6.1a Description: A vulnerability in the Zone-Based Firewall code could allow an unauthenticated, remote attacker to cause a device to reload. The issue is due to the handling o...

PT-2018-8651

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software versions 3.x.x.E through 16.x Description: A vulnerability in the Internet Group Management Protocol IGMP packet-processing functionality could allow an unauthenticated, adjacent attacker to exhaust buffers on an affecte...

PT-2018-8660

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue allows an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software, potentially gaining access to the underlying Linux shell ...

PT-2018-8652

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the CLI parser of Cisco IOS XE Software. These vulnerabilities could allow an authenticated, local attacker to gain access ...