5229 matches found
IOS HTTP Server Command Injection Vulnerability
A vulnerability exists in the IOS HTTP server in which HTML code inserted into dynamically generated output, such as the output from a show buffers command, will be passed to the browser requesting the page. This HTML code could be interpreted by the client browser and potentially execute malicio...
Cisco Security Agent Vulnerable to Privilege Escalation
...
Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone
...
Multiple Vulnerabilities Found by PROTOS IPSec Test Suite
Multiple Cisco products contain vulnerabilities in the processing of IPSec IKE Internet Key Exchange messages. These vulnerabilities were identified by the University of Oulu Secure Programming Group OUSPG "PROTOS" Test Suite for IPSec and can be repeatedly exploited to produce a denial of servic...
IOS Heap-based Overflow Vulnerability in System Timers
...
Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access
...
Cisco IPS MC Malformed Configuration Download Vulnerability
...
Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability
...
OpenSSL Version Rollback and Weak Cryptographic Algorithm Vulnerabilities
OpenSSL contains vulnerabilities that could allow an unauthenticated, remote attacker to bypass security restrictions. The first vulnerability CVE-2005-2969 affects any application using a SL/TLS server implementation provided by OpenSSL versions 0.9.7g and prior. If these implementations have...
Cisco IOS Firewall Authentication Proxy for FTP and Telnet Sessions Buffer Overflow
The Cisco IOS Firewall Authentication Proxy for FTP and/or Telnet Sessions feature in specific versions of Cisco IOS software is vulnerable to a remotely-exploitable buffer overflow condition. Devices that do not support, or are not configured for Firewall Authentication Proxy for FTP and/or Teln...
Cisco Intrusion Prevention System Vulnerable to Privilege Escalation
...
SSL Certificate Validation Vulnerability in IDS Management Software
...
Cisco Clean Access Unauthenticated API Access
...
IPv6 Crafted Packet Vulnerability
Cisco Internetwork Operating System IOS® Software is vulnerable to a Denial of Service DoS and potentially an arbitrary code execution attack from a specifically crafted IPv6 packet. The packet must be sent from a local network segment. Only devices that have been explicitly configured to process...
Cisco Security Agent Vulnerable to Crafted IP Attack
...
Cisco ONS 15216 OADM Telnet Denial-of-Service Vulnerability
...
Cisco CallManager Memory Handling Vulnerabilities
...
RADIUS Authentication Bypass
Remote Authentication Dial In User Service RADIUS authentication on a device that is running certain versions of Cisco Internetworking Operating System IOS and configured with a fallback method to none can be bypassed. Systems that are configured for other authentication methods or that are not...
FWSM URL Filtering Solution TCP ACL Bypass Vulnerability
...
Crafted ICMP Messages Can Cause Denial of Service
...
Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack
...
Vulnerabilities in Cisco IOS Secure Shell Server
Certain release trains of Cisco Internetwork Operating System IOS®, when configured to use the IOS Secure Shell SSH server in combination with Terminal Access Controller Access Control System Plus TACACS+ as a means to perform remote management tasks on IOS devices, may contain two vulnerabilitie...
Vulnerabilities in the Internet Key Exchange Xauth Implementation
Cisco Internetwork Operating System IOS Software release trains 12.2T, 12.3 and 12.3T may contain vulnerabilities in processing certain Internet Key Exchange IKE Xauth messages when configured to be an Easy VPN Server. Successful exploitation of these vulnerabilities may permit an unauthorized us...
ACNS Denial of Service and Default Admin Password Vulnerabilities
...
Default SNMP Community Strings in Cisco IP/VC Products
...
Crafted Packet Causes Reload on Cisco Routers
...
Multiple Crafted IPv6 Packets Cause Reload
...
Cisco IOS Misformed BGP Packet Causes Reload
...
Vulnerability in Cisco IOS Embedded Call Processing Solutions
Cisco Internetwork Operating System IOS® Software release trains 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the Cisco IOS Telephony Service ITS, Cisco CallManager Express CME or Survivable Remote Site Telephony SRST may contain a vulnerability in processing certain malformed control...
Default Administrative Password in Cisco Guard and Traffic Anomaly Detector
...
Cisco Unity Integrated with Exchange Has Default Passwords
...
Cisco Network Registrar Denial of Service Vulnerability
...
Crafted Timed Attack Evades Cisco Security Agent Protections
...
Cisco IOS DHCP Blocked Interface Denial-of-Service
...
Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication
...
Vulnerabilities in Kerberos 5 Implementation
...
Cisco Telnet Denial of Service Vulnerability
A specifically crafted Transmission Control Protocol TCP connection to a telnet or reverse telnet port of a Cisco device running Internetwork Operating System IOS® may block further telnet, reverse telnet, Remote Shell RSH, Secure Shell SSH, and in some cases Hypertext Transport Protocol HTTP...
Multiple Vulnerabilities in Cisco Secure Access Control Server
...
Cisco IOS Malformed OSPF Packet Causes Reload
...
Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Malformed Packet Vulnerabilities
...
Cisco Collaboration Server Vulnerability
...
Cisco IOS Malformed BGP Packet Causes Reload
...
Cisco CatOS Telnet, HTTP and SSH Vulnerability
...
Vulnerabilities in SNMP Message Processing
...
TCP Vulnerabilities in Multiple IOS-Based Cisco Products
...
TCP Vulnerabilities in Multiple Non-IOS Cisco Products
A vulnerability in the Transmission Control Protocol TCP specification RFC793 has been discovered by an external researcher. The successful exploitation enables an adversary to reset any established TCP connection in a much shorter time than was previously discussed publicly. Depending on the...
Cisco IPSec Malformed IKE Packet Vulnerability
...
A Default Username and Password in WLSE and HSE Devices
...
ATA-186 Password Disclosure Vulnerability
...
Cisco OpenSSL Implementation Vulnerability
...