NotCVE - vendor:"Cisco" product:"Asr 1001-hx"

Page 5 of 48 results (0.002 seconds)

CVSS: 9.0EPSS: 14%CPEs: 139EXPL: 0

CVE-2019-12650 – Cisco IOS XE Software Web UI Command Injection Vulnerabilities

https://notcve.org/view.php?id=CVE-2019-12650

25 Sep 2019 — Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device. For more information about these vulnerabilities, see the Details section of this advisory. Múltiples vulnerabilidades en la interfaz de usuario basada en web (UI web) del software Cisco IOS XE, podrían permitir a un atacante remoto autenticado ejecutar comandos con privilegios elevados en el dispositivo ... • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-webui-cmd-injection • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •

CVSS: 8.8EPSS: 0%CPEs: 40EXPL: 0

CVE-2019-1904 – Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability

https://notcve.org/view.php?id=CVE-2019-1904

21 Jun 2019 — A vulnerability in the web-based UI (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the aff... • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190612-iosxe-csrf • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 7.2EPSS: 0%CPEs: 211EXPL: 0

CVE-2019-1649 – Cisco Secure Boot Hardware Tampering Vulnerability

https://notcve.org/view.php?id=CVE-2019-1649

13 May 2019 — A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability affects multiple Cisco products that support hardware-based Secure Boot functionality. The vulnerability is due to an improper check on the area of code that manages on-premise updates to a Field Programmable Gate Array (FPGA) part of the Secure Boot har... • http://www.securityfocus.com/bid/108350 • CWE-284: Improper Access Control CWE-667: Improper Locking •

CVSS: 8.6EPSS: 14%CPEs: 59EXPL: 0

CVE-2018-0158 – Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability

https://notcve.org/view.php?id=CVE-2018-0158

28 Mar 2018 — A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device to be processed. A successful exploit could cause an affected d... • http://www.securityfocus.com/bid/103566 • CWE-20: Improper Input Validation CWE-772: Missing Release of Resource after Effective Lifetime •

CVSS: 8.6EPSS: 9%CPEs: 24EXPL: 0

CVE-2018-0173 – Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

https://notcve.org/view.php?id=CVE-2018-0173

28 Mar 2018 — A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a Relay Reply denial of service (DoS) condition. The vulnerability exists because the affected software performs incomplete input validation of encapsulated option 82 information that it receives in DHCPOFFER messages from DHCPv4 servers. An attacker ... • http://www.securityfocus.com/bid/103545 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 3%CPEs: 118EXPL: 0

CVE-2018-0177

https://notcve.org/view.php?id=CVE-2018-0177

28 Mar 2018 — A vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IPv4 packets. An attacker could exploit this vulnerability by sending specific IPv4 packets to an IPv4 address on... • http://www.securityfocus.com/bid/103563 • CWE-19: Data Processing Errors •

CVSS: 7.1EPSS: 2%CPEs: 306EXPL: 0

CVE-2018-0179 – Cisco IOS Software Denial-of-Service Vulnerability

https://notcve.org/view.php?id=CVE-2018-0179

28 Mar 2018 — Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599. Múltiples vulnerabilidades en la característica Login Enhancements (Login Block) de Cisco IOS Software per... • http://www.securityfocus.com/bid/103556 • CWE-399: Resource Management Errors •

CVSS: 7.1EPSS: 2%CPEs: 306EXPL: 0

CVE-2018-0180 – Cisco IOS Software Denial-of-Service Vulnerability

https://notcve.org/view.php?id=CVE-2018-0180

1...3 4 5