CVSS: 5.3EPSS: 0%CPEs: 45EXPL: 0CVE-2016-1459
https://notcve.org/view.php?id=CVE-2016-1459
17 Jul 2016 — Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service (device reload) via crafted attributes in a BGP message, aka Bug ID CSCuz21061. Cisco IOS 12.4 y 15.0 hasta la versión 15.5 y IOS XE 3.13 hasta la versión 3.17 permiten a usuarios remotos autenticados provocar una denegación de servicio (reinicio de dispositivo) a través de atributos manipulados en un mensaje BGP, también conocido como Bug ID CSCuz21061. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160715-bgp • CWE-399: Resource Management Errors •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0CVE-2016-1425
https://notcve.org/view.php?id=CVE-2016-1425
03 Jul 2016 — Cisco IOS 15.0(2)SG5, 15.1(2)SG3, 15.2(1)E, 15.3(3)S, and 15.4(1.13)S allows remote attackers to cause a denial of service (device crash) via a crafted LLDP packet, aka Bug ID CSCun66735. Cisco IOS 15.0(2)SG5, 15.1(2)SG3, 15.2(1)E, 15.3(3)S y 15.4(1.13)S permite a atacantes remotos causar una denegación de servicio (caída del dispositivo) a través de un paquete LLDP manipulado, también conocido como Bug ID CSCun66735. • http://www.securityfocus.com/bid/91545 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 2%CPEs: 4891EXPL: 0CVE-2016-1409
https://notcve.org/view.php?id=CVE-2016-1409
29 May 2016 — The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service (packet-processing outage) via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in May 2016. El protocolo de implementación Neighbor Discovery (ND) en la pila IPv6 en Cisco IOS XE 2.1 hasta la versión 3.17S, IOS XR 2.0.0 hasta la versión 5.3.2 y NX-OS permite a atacantes remotos provocar una den... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 187EXPL: 0CVE-2016-1384
https://notcve.org/view.php?id=CVE-2016-1384
20 Apr 2016 — The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898. La implementación NTP en Cisco IOS 15.1 y 15.5 y IOS XE 3.2 hasta la versión 3.17 permite a atacantes remotos modicar el tiempo del sistema a través de paquetes manipulados, también conocido como Bug ID CSCux46898. • http://www.securityfocus.com/bid/86685 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.3EPSS: 0%CPEs: 28EXPL: 0CVE-2016-1378
https://notcve.org/view.php?id=CVE-2016-1378
14 Apr 2016 — Cisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol (NMSP) port, aka Bug ID CSCum62591. Cisco IOS en versiones anteriores a 15.2(2)E1 en switches Catalyst permite a atacantes remotos obtener información de la versión del software potencialmente sensible a través de una petición al puerto Network Mobility Services Protocol (NMSP), también conocida como Bug ID CSCum62591. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-nms • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 2%CPEs: 59EXPL: 0CVE-2016-1351
https://notcve.org/view.php?id=CVE-2016-1351
26 Mar 2016 — The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload) via a crafted header in a packet, aka Bug ID CSCuu64279. La implemetación de Locator/ID Separation Protocol (LISP) en Cisco IOS 15.1 y 15.2 y NX-OS 4.1 hasta la versión 6.2 permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de una cabecera manipulada en un paquete, también conocido com... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-lisp • CWE-20: Improper Input Validation CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 9%CPEs: 33EXPL: 0CVE-2016-1347
https://notcve.org/view.php?id=CVE-2016-1347
24 Mar 2016 — The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment, aka Bug ID CSCuq59708. La implementación de Wide Area Application Services (WAAS) Express en Cisco IOS 15.1 hasta la versión 15.5 permite a atacantes remotos causar una denegación de servicio (recarga de dispositivo) a través de un segmento TCP manipulado, también conocida como Bug ID CSCuq59708. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 1%CPEs: 155EXPL: 0CVE-2015-6278
https://notcve.org/view.php?id=CVE-2015-6278
28 Sep 2015 — The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S does not properly implement the Control Plane Protection (aka CPPr) feature, which allows remote attackers to cause a denial of service (device reload) via a flood of ND packets, aka Bug ... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 1%CPEs: 139EXPL: 0CVE-2015-6279
https://notcve.org/view.php?id=CVE-2015-6279
28 Sep 2015 — The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S allows remote attackers to cause a denial of service (device reload) via a malformed ND packet with the Cryptographically Generated Address (CGA) option, aka Bug ID CSCuo04400. Vulnerabil... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 1%CPEs: 62EXPL: 0CVE-2015-0681
https://notcve.org/view.php?id=CVE-2015-0681
24 Jul 2015 — The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO before 3.3.0XO; 3.2.xSQ; 3.3.xSQ; and 3.4.xSQ allows remote attackers to cause a denial of service (device hang or reload) via multiple requests that trigger improper memory management, aka Bug ID CSC... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-tftp • CWE-399: Resource Management Errors •