Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2017-06700)

Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in the Simple Network Management Protocol SNMP subsystem in Cisco IOS XE Software. A remote attacker could exploit this vulnerability to cause a denial of service devi...

CVE-2017-6615

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

Buffer overflow

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

Buffer overflow

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

Race condition

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

CVE-2017-3862

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2017-6615

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

CVE-2017-3861

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2017-3863

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2017-3860

Cisco IOS and IOS XE EnergyWise DoS vulnerabilities (CVE-2017-3860) arise from improper parsing of crafted EnergyWise IPv4 packets, enabling unauthenticated remote attackers to trigger a buffer overflow or device reload and cause denial of service. Affected: IOS 12.2 and 15.0–15.6; IOS XE 3.2–3.1...

CVE-2017-3861

Cisco IOS and IOS XE EnergyWise DoS vulnerabilities (CVE-2017-3861, among others) stem from improper parsing of crafted EnergyWise IPv4 packets. An unauthenticated remote attacker can trigger a buffer overflow or device reload, causing denial of service. IPv6 is not exploitable; only devices conf...

CVE-2017-3862

Cisco IOS and IOS XE EnergyWise DoS vulnerabilities (CVE-2017-3862) arise from improper parsing of IPv4 EnergyWise packets, enabling unauthenticated remote exploitation that can cause a buffer overflow or device reload. Affected: IOS 12.2 and 15.0–15.6; IOS XE 3.2–3.18. IPv4 packets to EnergyWise...

CVE-2017-3863

CVE-2017-3863 describes Denial of Service vulnerabilities in Cisco IOS and IOS XE EnergyWise module due to improper parsing of crafted IPv4 EnergyWise packets. A remote, unauthenticated attacker can cause a buffer overflow or device reload, impacting devices configured as EnergyWise domain member...

Exploit for Improper Input Validation in Cisco Ios

A vulnerability in the Cisco Cluster Management Protocol CMP...

Cisco IOS XE Software Simple Network Management Protocol Subsystem Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources...

CVE-2017-3863: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2017-3860: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2017-6615: Out-of-bounds Read

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

CVE-2017-3862: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2017-3861: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...