Page 17 of 542 results (0.014 seconds)

CVSS: 7.5EPSS: 1%CPEs: 4891EXPL: 0

29 May 2016 — The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service (packet-processing outage) via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in May 2016. El protocolo de implementación Neighbor Discovery (ND) en la pila IPv6 en Cisco IOS XE 2.1 hasta la versión 3.17S, IOS XR 2.0.0 hasta la versión 5.3.2 y NX-OS permite a atacantes remotos provocar una den... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 0%CPEs: 20EXPL: 0

14 May 2016 — The packet-processing microcode in Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2, and 15.2(4)EA on Industrial Ethernet 4000 devices and 15.2(2)EB and 15.2(2)EB1 on Industrial Ethernet 5000 devices allows remote attackers to cause a denial of service (packet data corruption) via crafted IPv4 ICMP packets, aka Bug ID CSCuy13431. El microcódigo de procesamiento de paquetes en Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2 y 15.2(4)EA en dispositivos Industrial Ethernet 4000 y 15.2(2)EB y 15.2(2)EB1 en dispositivos ... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160513-ies • CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 0%CPEs: 187EXPL: 0

20 Apr 2016 — The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898. La implementación NTP en Cisco IOS 15.1 y 15.5 y IOS XE 3.2 hasta la versión 3.17 permite a atacantes remotos modicar el tiempo del sistema a través de paquetes manipulados, también conocido como Bug ID CSCux46898. • http://www.securityfocus.com/bid/86685 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 5.3EPSS: 0%CPEs: 28EXPL: 0

14 Apr 2016 — Cisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol (NMSP) port, aka Bug ID CSCum62591. Cisco IOS en versiones anteriores a 15.2(2)E1 en switches Catalyst permite a atacantes remotos obtener información de la versión del software potencialmente sensible a través de una petición al puerto Network Mobility Services Protocol (NMSP), también conocida como Bug ID CSCum62591. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-nms • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.8EPSS: 0%CPEs: 59EXPL: 0

26 Mar 2016 — The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload) via a crafted header in a packet, aka Bug ID CSCuu64279. La implemetación de Locator/ID Separation Protocol (LISP) en Cisco IOS 15.1 y 15.2 y NX-OS 4.1 hasta la versión 6.2 permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de una cabecera manipulada en un paquete, también conocido com... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-lisp • CWE-20: Improper Input Validation CWE-399: Resource Management Errors •

CVSS: 7.8EPSS: 0%CPEs: 33EXPL: 0

24 Mar 2016 — The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment, aka Bug ID CSCuq59708. La implementación de Wide Area Application Services (WAAS) Express en Cisco IOS 15.1 hasta la versión 15.5 permite a atacantes remotos causar una denegación de servicio (recarga de dispositivo) a través de un segmento TCP manipulado, también conocida como Bug ID CSCuq59708. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f • CWE-399: Resource Management Errors •

CVSS: 6.8EPSS: 0%CPEs: 2EXPL: 0

17 Feb 2016 — Cisco IOS 15.5(3)M and 15.6(1)T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service (device reload) via an SNMP request for unspecified BRIDGE MIB OIDs, aka Bug ID CSCux89878. Cisco IOS 15.5(3)M y 15.6(1)T0a en routers Cisco 1000 Connected Grid permiten a usuarios remotos autenticados provocar una denegación de servicio (recarga de dispositivo) a través de una petición SNMP para OIDs BRIDGE MIB no especificados, también conocida como Bug ID CSCux89878. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-grid • CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 0%CPEs: 18EXPL: 0

19 Dec 2015 — The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service (IPsec connection termination) via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236. La máquina de estado IKEv1 en Cisco IOS 15.4 hasta la versión 15.6 y IOS XE 3.15 hasta la versión 3.17 permite a atacantes remotos causar una denegación de servicio (terminación de conexión IPsec) a través de un paquete IKEv1 manipulado en un dispositivo final del tunel, ... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151218-ios • CWE-19: Data Processing Errors •

CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0

15 Dec 2015 — The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS 15.3(3)S0.1 on ASR devices mishandles internal tables, which allows remote attackers to cause a denial of service (memory consumption or device crash) via a flood of crafted ND messages, aka Bug ID CSCup28217. La implementación del protocolo Neighbor Discovery (ND) en la pila IPv6 en Cisco IOS 15.3(3)S0.1 en dispositivos ASR no maneja adecuadamente las tablas internas, lo que permite a atacantes remotos causar una denegación ... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151214-ios • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

01 Dec 2015 — The publish-event event-manager feature in Cisco IOS 15.5(2)S and 15.5(3)S on Cloud Services Router 1000V devices allows local users to execute arbitrary commands with root privileges by leveraging administrative access to enter crafted environment variables, aka Bug ID CSCux14943. La funcionalidad publish-event de event-manager en Cisco IOS 15.5(2)S y 15.5(3)S en dispositivos Cloud Services Router 1000V permite a usuarios locales ejecutar comandos arbitrarios con privilegios de root aprovechando el acceso ... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151130-csr • CWE-20: Improper Input Validation •