CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2015-0669
https://notcve.org/view.php?id=CVE-2015-0669
21 Mar 2015 — The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 15.4S and 15.4(3)S allows remote attackers to modify configuration settings or cause a denial of service (partial service outage) by sending crafted Autonomic Networking (AN) messages on an intranet network, aka Bug ID CSCup62167. La implementación Autonomic Networking Infrastructure (ANI) de Cisco IOS 15.4S y 15.4(3)S permite a atacantes remotos modificar la configuración o causar una denegación de servicio (caída parcial del servici... • http://tools.cisco.com/security/center/viewAlert.x?alertId=37935 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 0%CPEs: 11EXPL: 0CVE-2015-0607
https://notcve.org/view.php?id=CVE-2015-0607
06 Mar 2015 — The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass authentication in opportunistic circumstances via a connection attempt that triggers an invalid code, as demonstrated by a connection attempt with a blank password, aka Bug IDs CSCuo09400 and CSCun16016. La característica Authentication Proxy en Cisco IOS no maneja correctamente los códigos de retorno AAA inválidos de los servidores RADIUS y... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0607 • CWE-287: Improper Authentication •
CVSS: 7.1EPSS: 0%CPEs: 10EXPL: 0CVE-2015-0609
https://notcve.org/view.php?id=CVE-2015-0609
16 Feb 2015 — Race condition in the Common Classification Engine (CCE) in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCuj96752. Condición de carrera en Common Classification Engine (CCE) en la implamantación Measurement, Aggregation, and... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0609 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2015-0593
https://notcve.org/view.php?id=CVE-2015-0593
13 Feb 2015 — The Zone-Based Firewall implementation in Cisco IOS 12.4(122)T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service (device reload) via crafted network traffic, aka Bug ID CSCul65003. La implementación Zone-Based Firewall en Cisco IOS 12.4(122)T y anteriores no maneja correctamente las estructuras de objetos de sesiones, lo que permite a atacantes remotos causar una denegación de servicio (recarga de dispositivo) a través de trafico manip... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0593 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2015-0592
https://notcve.org/view.php?id=CVE-2015-0592
12 Feb 2015 — The Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers incorrect kernel-timer handling, aka Bug ID CSCuh25672. La implementación Zone-Based Firewall en Cisco IOS 15.4(2)T3 y anteriores permite a atacantes remotos causar una denegación de servicio (recarga del dispositivo) a través de trafico manipulado de la red que provoca el manejo incorrecto del temperizador del kernel, tambié... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0592 • CWE-399: Resource Management Errors •
CVSS: 7.1EPSS: 0%CPEs: 10EXPL: 0CVE-2015-0608
https://notcve.org/view.php?id=CVE-2015-0608
12 Feb 2015 — Race condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCul48736. Condición de carrera en la implementación Measurement, Aggregation, y Correlation Engine (MACE) en Cisco IOS 15.4(2)T3 y anteriores permite a atacantes... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0608 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 5.9EPSS: 0%CPEs: 4EXPL: 0CVE-2015-0610
https://notcve.org/view.php?id=CVE-2015-0610
12 Feb 2015 — Race condition in the object-group ACL feature in Cisco IOS 15.5(2)T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCun21071. Condición de carrera en la característica object-group ACL en Cisco IOS 15.5(2)T y anteriores permite a atacantes remotos evadir las restricciones de acceso a través de trafico manipulado de la red que pr... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0610 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0CVE-2014-3293
https://notcve.org/view.php?id=CVE-2014-3293
28 Oct 2014 — Cisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet processing, which allows remote attackers to cause a denial of service (BGP neighbor flapping) by sending many crafted IPv4 packets, aka Bug ID CSCuo29736. Cisco IOS 15.4(3)S0b en los dispositivos ASR901 toma decisiones incorrectas para utilizar la CPU para el procesamiento de paquetes IPv4, lo que permite a atacantes remotos causar una denegación de servicio (cambios constantes 'flapping' entre vecinos BGP) medi... • http://secunia.com/advisories/61830 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2014-3357
https://notcve.org/view.php?id=CVE-2014-3357
25 Sep 2014 — Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allow remote attackers to cause a denial of service (device reload) via malformed mDNS packets, aka Bug ID CSCul90866. Cisco IOS 15.0, 15.1, 15.2, y 15.4 y IOS XE 3.3.xSE anterior a 3.3.2SE, 3.3.xXO anterior a 3.3.1XO, 3.5.xE anterior a 3.5.2E, y 3.11.xS anterior a 3.11.1S permite a atacantes remotos causar una denegación de servicio (recarga de dispositivo) a trav... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2014-3358
https://notcve.org/view.php?id=CVE-2014-3358
25 Sep 2014 — Memory leak in Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allows remote attackers to cause a denial of service (memory consumption, and interface queue wedge or device reload) via malformed mDNS packets, aka Bug ID CSCuj58950. Fuga de información en Cisco IOS 15.0, 15.1, 15.2, y 15.4 y IOS XE 3.3.xSE anterior a 3.3.2SE, 3.3.xXO anterior a 3.3.1XO, 3.5.xE anterior a 3.5.2E, y 3.11.xS anterior a 3.11.1S permi... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •