Page 12 of 430 results (0.014 seconds)

CVSS: 5.9EPSS: 0%CPEs: 3EXPL: 0

23 Jun 2015 — Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396. Condición de carrera en Cisco IOS 12.2SCH en el módulo Performance Routing Engine (PRE) en los dispositivos uBR10000, cuando NetFlow y una VPN MPLS IPv6 están configurados, permite a atacantes remotos causar una de... • http://tools.cisco.com/security/center/viewAlert.x?alertId=39439 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0

20 Jun 2015 — Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203. Cisco IOS 12.2SCH en Cable Modem Termination Systems (CMTS) de los routers uBR10000 no restringe correctamente el acceso al servicio IP Detail Record (IPDR), lo que permite a atacantes remotos obtener in... • http://tools.cisco.com/security/center/viewAlert.x?alertId=39432 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.5EPSS: 0%CPEs: 10EXPL: 0

12 Jun 2015 — The IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500 devices allows remote authenticated users to cause a denial of service (device reload) by sending a crafted message during IPsec tunnel setup, aka Bug ID CSCur70505. La implementación IKE en el módulo de servicio WS-IPSEC-3 en Cisco IOS 12.2 en los dispositivos Catalyst 6500 permite a usuarios remotos autenticados causar una denegación de servicio (recarga de dispositivo) mediante el envió de un mensaje manipulado dur... • http://tools.cisco.com/security/center/viewAlert.x?alertId=39233 • CWE-399: Resource Management Errors •

CVSS: 7.8EPSS: 0%CPEs: 36EXPL: 0

26 Mar 2015 — Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted TCP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum94811. Fuga de memoria en el módulo de entradas de TCP en Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, y 15.4 y IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-tcpleak • CWE-399: Resource Management Errors •

CVSS: 7.8EPSS: 0%CPEs: 59EXPL: 0

26 Mar 2015 — Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) UDP packets, aka Bug ID CSCum98371. Cisco IOS 12.2, 12.4, 15.0, 15.2, y 15.3 permite a atacantes remotos causar una denegación de servicio (recarga de dispositivo) a través de paquetes UDP de Common Industrial Protocol (CIP) malformados, también conocido como Bug ID CSCum98371. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-cip • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 23EXPL: 0

26 Mar 2015 — The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S, 3.12.xS before 3.12.2S, and 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) by sending malformed mDNS UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCup70579. Service Discovery Gateway (también conocido como mDNS Gateway) en Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, y 15.4 y IOS XE... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-mdns • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 41EXPL: 0

26 Mar 2015 — The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) via spoofed AN messages, aka Bug ID CSCup62315. La implemenatción Autonomic Networking Infrastructure (ANI) en Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, y 15.4 y IOS XE 3.10.xS hasta 3.13.xS anterior a 3.13.1S permite a atacantes remotos causar una denegación de servicio (recarga d... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ani • CWE-20: Improper Input Validation •

CVSS: 9.1EPSS: 0%CPEs: 43EXPL: 0

26 Mar 2015 — The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority (ANRA) responses, and consequently bypass intended device and node access restrictions or cause a denial of service (disrupted domain access), via crafted AN messages, aka Bug ID CSCup62191. La implementación Autonomic Networking Infrastructure (ANI) en Cisco IOS 12.2, 12... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ani • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 61EXPL: 0

26 Mar 2015 — Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Common Industrial Protocol (CIP) TCP packets, aka Bug ID CSCun49658. Fuga de memoria en Cisco IOS 12.2, 12.4, 15.0, 15.2, y 15.3 permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de paquetes TCP de Common Industrial Protocol (CIP) manipulados, también conocido como Bug ID CSCun49658. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-cip • CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 0%CPEs: 31EXPL: 0

26 Mar 2015 — Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge) via crafted ICMPv4 packets, aka Bug ID CSCsi02145. Cisco IOS 12.2, 12.4, 15.0, 15.2, y 15.3, cuando una interfaz VRF está configurado, permite a atacantes remotos causar una denegación de servicio (presión en la cola de la interfaz) a través de paquetes ICMPv4 manipulados, también conocido como Bug ID CSCsi02145. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-wedge • CWE-20: Improper Input Validation •