CVSS: 7.1EPSS: 0%CPEs: 10EXPL: 0CVE-2015-0608
https://notcve.org/view.php?id=CVE-2015-0608
12 Feb 2015 — Race condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCul48736. Condición de carrera en la implementación Measurement, Aggregation, y Correlation Engine (MACE) en Cisco IOS 15.4(2)T3 y anteriores permite a atacantes... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0608 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 5.9EPSS: 0%CPEs: 4EXPL: 0CVE-2015-0610
https://notcve.org/view.php?id=CVE-2015-0610
12 Feb 2015 — Race condition in the object-group ACL feature in Cisco IOS 15.5(2)T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCun21071. Condición de carrera en la característica object-group ACL en Cisco IOS 15.5(2)T y anteriores permite a atacantes remotos evadir las restricciones de acceso a través de trafico manipulado de la red que pr... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0610 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.8EPSS: 1%CPEs: 2EXPL: 0CVE-2015-0586
https://notcve.org/view.php?id=CVE-2015-0586
28 Jan 2015 — The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15.3(100)M and earlier on Cisco 2900 Integrated Services Router (aka Cisco Internet Router) devices allows remote attackers to cause a denial of service (NBAR process hang) via IPv4 packets, aka Bug ID CSCuo73682. La implementación del protocolo Network-Based Application Recognition (NBAR) en Cisco IOS 15.3(100)M y anteriores en los dispositivos de Cisco 2900 Integrated Services Router (también conocido como Cisco Internet... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0586 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0CVE-2014-3409
https://notcve.org/view.php?id=CVE-2014-3409
25 Oct 2014 — The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets, aka Bug ID CSCuq93406. La caracteristica del manejador Ethernet Connectivity Fault Management (CFM) en Cisco IOS 12.2(33)SRE9a y anteriores e IOS XE 3.13S y anteriores permite a atacantes remotos causar una denegación de servicio (recarga de dispositivo) a través de paquetes CFM ma... • http://secunia.com/advisories/61799 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 4%CPEs: 131EXPL: 0CVE-2014-3354
https://notcve.org/view.php?id=CVE-2014-3354
25 Sep 2014 — Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCui11547. Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, y 15.3 y IOS XE 2.x y 3.x anterior a 3.7.4S; 3.2.xSE y 3.3.xSE anterior a 3.3.2SE; 3.3.xSG y 3.4.xSG anterior a 3.4.4SG; y 3.8.xS, 3.9.... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-rsvp • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 1%CPEs: 17EXPL: 0CVE-2014-3327
https://notcve.org/view.php?id=CVE-2014-3327
11 Aug 2014 — The EnergyWise module in Cisco IOS 12.2, 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.2.xXO, 3.3.xSG, 3.4.xSG, and 3.5.xE before 3.5.3E allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet, aka Bug ID CSCup52101. El módulo EnergyWise en Cisco IOS 12.2, 15.0, 15.1, 15.2 y 15.4 y IOS XE 3.2.xXO, 3.3.xSG, 3.4.xSG y 3.5.xE anterior a 3.5.3E permite a atacantes remotos causar una denegación de servicio (reinicio de dispositivo) a través de un paquete IPv4 manipulado, también ... • http://secunia.com/advisories/60650 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0CVE-2014-3262
https://notcve.org/view.php?id=CVE-2014-3262
16 May 2014 — The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of service (CEF outage and packet drops) via malformed messages, aka Bug ID CSCun73782. La implementación Locator/ID Separation Protocol (LISP) en Cisco IOS 15.3(3)S y anteriores y IOS XE no valida debidamenete parámetros en mensajes de control ITR, lo que permite a atacantes remotos causar una den... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3262 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2012-3946
https://notcve.org/view.php?id=CVE-2012-3946
24 Apr 2014 — Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a small percentage" of the packets, aka Bug ID CSCty73682. Cisco IOS anterior a 15.3(2)S permite a atacantes remotos evadir restricciones ACL de interfaz en circunstancias oportunistas mediante el envío de paquetes IPv6 en un escenario no especificado en que descargas de paquetes esperados no ... • http://www.cisco.com/c/en/us/td/docs/ios/15_3s/release/notes/15_3s_rel_notes/15_3s_caveats_15_3_2s.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.8EPSS: 0%CPEs: 6EXPL: 0CVE-2012-5422
https://notcve.org/view.php?id=CVE-2012-5422
23 Apr 2014 — Unspecified vulnerability in Cisco IOS before 15.3(2)T on AS5400 devices allows remote authenticated users to cause a denial of service (spurious errors) via unknown vectors, aka Bug ID CSCub61009. Vulnerabilidad no especificada en Cisco IOS anterior a 15.3(2)T en dispositivos AS5400 permite a usuarios remotos autenticados causar una denegación de servicio (errores espurios) a través de vectores desconocidos, también conocido como Bug ID CSCub61009. • http://www.cisco.com/c/en/us/td/docs/ios/15_3m_and_t/release/notes/15_3m_and_t.pdf •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2012-5427
https://notcve.org/view.php?id=CVE-2012-5427
23 Apr 2014 — Cisco IOS Unified Border Element (CUBE) in Cisco IOS before 15.3(2)T allows remote authenticated users to cause a denial of service (input queue wedge) via a crafted series of RTCP packets, aka Bug ID CSCuc42518. Cisco IOS Unified Border Element (CUBE) en Cisco IOS anterior a 15.3(2)T permite a usuarios remotos autenticados causar una denegación de servicio (presión en la cola de entrada) a través de una serie de paquetes RTCP manipulada, también conocido como Bug ID CSCuc42518. • http://www.cisco.com/c/en/us/td/docs/ios/15_3m_and_t/release/notes/15_3m_and_t.pdf • CWE-20: Improper Input Validation •