Page 23 of 328 results (0.010 seconds)

CVSS: 7.8EPSS: 0%CPEs: 82EXPL: 0

26 Mar 2016 — Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Relay message, aka Bug ID CSCus55821. Cisco IOS 15.0 hasta la versión 15.5 y IOS XE 3.3 hasta la versión 3.16 permiten a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de un mensaje DHCPv6 Relay manipulado, también conocido como Bug ID CSCus55821. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-dhcpv6 • CWE-399: Resource Management Errors •

CVSS: 7.8EPSS: 0%CPEs: 38EXPL: 0

26 Mar 2016 — The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in a Smart Install packet, aka Bug ID CSCuv45410. La implementación del cliente Smart Install en Cisco IOS 12.2, 15.0 y 15.2 y IOS XE 3.2 hasta la versión 3.7 permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de parámetros de lista de imágenes manipulados en u... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-smi • CWE-399: Resource Management Errors •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

23 Dec 2015 — Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405. Cisco IOS XE 16.1.1 permite a atacantes remotos causar una denegación de servicio (recarga de dispositivo) a través de un paquete con la dirección MAC de fuente 00-00-00-00-00-00, también conocida como Bug ID CSCux48405. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2015-1221-iosxe • CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 0%CPEs: 18EXPL: 0

19 Dec 2015 — The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service (IPsec connection termination) via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236. La máquina de estado IKEv1 en Cisco IOS 15.4 hasta la versión 15.6 y IOS XE 3.15 hasta la versión 3.17 permite a atacantes remotos causar una denegación de servicio (terminación de conexión IPsec) a través de un paquete IKEv1 manipulado en un dispositivo final del tunel, ... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151218-ios • CWE-19: Data Processing Errors •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

03 Dec 2015 — Cisco IOS XE 15.4(3)S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130. Cisco IOS XE 15.4(3)S en dispositivos ASR 1000 carga de manera incorrecta paquetes de software, lo que permite a usuarios locales eludir restricciones de licencia y obtener ciertos privilegios de root utilizando la CLI para introducir nombres de archivo manipulados, también ... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151130-asa • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 7.8EPSS: 0%CPEs: 139EXPL: 0

28 Sep 2015 — The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S allows remote attackers to cause a denial of service (device reload) via a malformed ND packet with the Cryptographically Generated Address (CGA) option, aka Bug ID CSCuo04400. Vulnerabil... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 155EXPL: 0

28 Sep 2015 — The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S does not properly implement the Control Plane Protection (aka CPPr) feature, which allows remote attackers to cause a denial of service (device reload) via a flood of ND packets, aka Bug ... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs • CWE-20: Improper Input Validation •

CVSS: 9.3EPSS: 0%CPEs: 74EXPL: 0

28 Sep 2015 — The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote attackers to obtain login access by leveraging knowledge of a username and the associated public key, aka Bug ID CSCus73013. Vulnerabilidad en la funcionalidad SSHv2 en Cisco IOS 15.2, 15.3, 15.4 y 15.5 y IOS XE 3.6E... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-sshpk • CWE-287: Improper Authentication •

CVSS: 7.8EPSS: 0%CPEs: 95EXPL: 0

25 Sep 2015 — Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service (device reload) via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933. Vulnerabilidad en Cisco IOS XE 2.x y 3.x en versiones anteriores a 3.10.6S, 3.11.xS hasta la versión 3.13.xS en versiones anteriores a 3.13.3S y 3.14.xS hasta la versión 3.15.xS en versiones anteriores a 3.15.1S, permite a atacantes remotos pro... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-iosxe • CWE-20: Improper Input Validation CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0

18 Sep 2015 — Cisco IOS 15.2(3)E and earlier and IOS XE 3.6(2)E and earlier allow remote attackers to cause a denial of service (functionality loss) via crafted Cisco Discovery Protocol (CDP) packets, aka Bug ID CSCuu25770. Vulnerabilidad en Cisco IOS 15.2(3)E y versiones anteriores y IOS XE 3.6(2)E y versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (pérdida de funcionalidad) a través de paquetes Cisco Discovery Protocol (CDP) modificados, también conocida como Bug ID CSCuu25770. • http://tools.cisco.com/security/center/viewAlert.x?alertId=41006 • CWE-399: Resource Management Errors •