CVE-2014-3290

CVE-2014-3290 concerns Cisco IOS XE Software with Autonomic Networking Infrastructure. The mDNS implementation, used for autonomic networking, can be manipulated due to unconstrained mDNS interactions, allowing an unauthenticated, adjacent attacker to read or overwrite autonomic-networking servic...

CVE-2014-3290

The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867...

CVE-2014-3290: Undefined Security Weakness

The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867...

PT-2014-5185

Name of the Vulnerable Software and Affected Versions Cisco IOS XE version 3.12S Description The issue arises from the mDNS implementation not properly interacting with autonomic networking. This allows remote attackers to obtain sensitive networking-services information by sniffing the network o...

Cisco IOS XE Software PPPoE Denial of Service Vulnerability

A vulnerability in the PPP over Ethernet PPPoE processing code of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device, which could lead to a denial of service DoS condition. The vulnerability is due to improper processing of certain...

Code injection

Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service device reload via a malformed PPPoE packet, aka Bug ID CSCuo55180...

CVE-2014-3284

Cisco IOS XE on ASR1000 devices with PPPoE termination enabled is vulnerable to a DoS via malformed PPPoE packets, causing a device reload. The issue stems from improper PPPoE processing and can be triggered remotely by an attacker in the same broadcast/collision domain. Multiple sources confirm ...

CVE-2014-3284: Improper Input Validation

Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service device reload via a malformed PPPoE packet, aka Bug ID CSCuo55180...

PT-2014-5180

Name of the Vulnerable Software and Affected Versions Cisco IOS XE on ASR1000 devices affected versions not specified Description The issue allows an unauthenticated, adjacent attacker to cause a reload of the affected device, leading to a denial of service DoS condition. This is due to improper...

CVE-2014-3269

Cisco IOS XE Software SNMP Denial of Service vulnerability (CVE-2014-3269) affects the SNMP module in IOS XE 3.5E. The issue arises from frequent polling of certain MIBs, which can allow an authenticated, remote attacker to cause a device reload (DoS) by sustained SNMP polling. Multiple connected...

CVE-2014-3269: Improper Input Validation

The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service device reload by polling frequently, aka Bug ID CSCug65204...

PT-2014-5165

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.5E Description A vulnerability in the SNMP module could allow an authenticated, remote attacker to cause a reload of the affected device by sending continuous SNMP polling requests, exploiting the issue of frequent...

PT-2014-5158

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.33S and earlier Cisco IOS XE affected versions not specified Description The Locator/ID Separation Protocol LISP implementation does not properly validate parameters in ITR control messages, allowing remote attackers to...

Cisco IOS XE VSS / BDF Traffic DoS (CSCug41049 / CSCue61890)

The remote Cisco device is affected by a denial of service vulnerability in its packet driver code when handling Virtual Switching Systems VSS or Bidirectional Forwarding Detection BFD traffic. An unauthenticated, adjacent attacker can exploit this to cause a device reload. Note that this issue...

CVE-2014-2183

The L2TP module in Cisco IOS XE 3.10S.2 and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service ESP card reload via a malformed L2TP packet, aka Bug ID CSCun09973...

CVE-2014-2183

The L2TP module in Cisco IOS XE 3.10S.2 and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service ESP card reload via a malformed L2TP packet, aka Bug ID CSCun09973...

CVE-2014-2183

The CVE-2014-2183 issue concerns Cisco IOS XE on ASR 1000 Series routers (3.10S(.2) and earlier). The L2TP module can be triggered by malformed L2TP packets over the network, causing a denial-of-service via ESP card reload. Exploitation requires authenticated access; impact is a reload of the ESP...

CVE-2014-2183: Improper Input Validation

The L2TP module in Cisco IOS XE 3.10S.2 and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service ESP card reload via a malformed L2TP packet, aka Bug ID CSCun09973...

PT-2014-4540

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.10S.2 and earlier Description A vulnerability in the Layer 2 Tunneling Protocol L2TP module allows remote authenticated users to cause a denial of service via a malformed L2TP packet. The vulnerability occurs during the...

CVE-2014-2143: Undefined Security Weakness

The IKE implementation in Cisco IOS 15.41T and earlier and IOS XE allows remote attackers to cause a denial of service security-association drop via crafted Main Mode packets, aka Bug ID CSCun31021...