CVSS: 9.0EPSS: 14%CPEs: 139EXPL: 0CVE-2019-12650 – Cisco IOS XE Software Web UI Command Injection Vulnerabilities
https://notcve.org/view.php?id=CVE-2019-12650
25 Sep 2019 — Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device. For more information about these vulnerabilities, see the Details section of this advisory. Múltiples vulnerabilidades en la interfaz de usuario basada en web (UI web) del software Cisco IOS XE, podrían permitir a un atacante remoto autenticado ejecutar comandos con privilegios elevados en el dispositivo ... • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-webui-cmd-injection • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 8.6EPSS: 14%CPEs: 59EXPL: 0CVE-2018-0158 – Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
https://notcve.org/view.php?id=CVE-2018-0158
28 Mar 2018 — A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device to be processed. A successful exploit could cause an affected d... • http://www.securityfocus.com/bid/103566 • CWE-20: Improper Input Validation CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 7.1EPSS: 2%CPEs: 306EXPL: 0CVE-2018-0179 – Cisco IOS Software Denial-of-Service Vulnerability
https://notcve.org/view.php?id=CVE-2018-0179
28 Mar 2018 — Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599. Múltiples vulnerabilidades en la característica Login Enhancements (Login Block) de Cisco IOS Software per... • http://www.securityfocus.com/bid/103556 • CWE-399: Resource Management Errors •
CVSS: 7.1EPSS: 2%CPEs: 306EXPL: 0CVE-2018-0180 – Cisco IOS Software Denial-of-Service Vulnerability
https://notcve.org/view.php?id=CVE-2018-0180
28 Mar 2018 — Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599. Múltiples vulnerabilidades en la característica Login Enhancements (Login Block) de Cisco IOS Software per... • http://www.securityfocus.com/bid/103556 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 1%CPEs: 9EXPL: 0CVE-2015-6269
https://notcve.org/view.php?id=CVE-2015-6269
31 Aug 2015 — Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted (1) IPv4 or (2) IPv6 packet, aka Bug ID CSCsw69990. Vulnerabilidad en Cisco IOS XE en versiones anteriores a 2.2.3 en dispositivos ASR 1000, permite a atacantes remotos causar una denegación de servicio (caída de Embedded Services Processor) a través de la manipulación de un paquete (1) IPv4 (2) IPv6, también conocido como Bug ID CSCsw69990. • http://tools.cisco.com/security/center/viewAlert.x?alertId=40686 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 1%CPEs: 9EXPL: 0CVE-2015-6270
https://notcve.org/view.php?id=CVE-2015-6270
31 Aug 2015 — Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted IPv6 packet, aka Bug ID CSCsv98555. Vulnerabilidad en Cisco IOS XE en versiones anteriores a 2.2.3 en dispositivos ASR 1000, permite a atacantes remotos causar una denegación de servicio (caída de Embedded Services Processor) a través de un paquete IPv6 manipulado, también conocido como Bug ID CSCsv98555. • http://tools.cisco.com/security/center/viewAlert.x?alertId=40687 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 1%CPEs: 23EXPL: 0CVE-2015-6271
https://notcve.org/view.php?id=CVE-2015-6271
31 Aug 2015 — Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008. Vulnerabilidad en Cisco IOS XE 2.1.0 hasta la versión 2.4.3 y 2.5.0 en dispositivos ASR 1000, cuando se utiliza NAT Application Layer Gateway, permite a atacantes remotos causar una denegación de servicio (caída de Embedded Services Processor) a trav... • http://tools.cisco.com/security/center/viewAlert.x?alertId=40688 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 1%CPEs: 15EXPL: 0CVE-2015-6272
https://notcve.org/view.php?id=CVE-2015-6272
31 Aug 2015 — Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064. Vulnerabilidad en Cisco IOS XE 2.1.0 hasta la versión 2.2.3 y 2.3.0 en dispositivos ASR 1000, cuando se utiliza NAT Application Layer Gateway, permite a atacantes remotos causar una denegación de servicio (caída de Embedded Services Pro... • http://tools.cisco.com/security/center/viewAlert.x?alertId=40689 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 1%CPEs: 9EXPL: 0CVE-2015-6267
https://notcve.org/view.php?id=CVE-2015-6267
29 Aug 2015 — Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted L2TP packet, aka Bug IDs CSCsw95722 and CSCsw95496. Vulnerabilidad en Cisco IOS XE en versiones anteriores a 2.2.3 en dispositivos ASR 1000, permite a atacantes remotos causar una denegación de servicio (caída de Embedded Services Processor) a través de un paquete L2TP manipulado, también conocida como Bug IDs CSCsw95722 y CSCsw95496. • http://tools.cisco.com/security/center/viewAlert.x?alertId=40684 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0CVE-2015-6268
https://notcve.org/view.php?id=CVE-2015-6268
29 Aug 2015 — Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted IPv4 UDP packet, aka Bug ID CSCsw95482. Vulnerabilidad en Cisco IOS XE en versiones anteriores a 2.2.3 en dispositivos ASR 1000, permite a atacantes remotos causar una denegación de servicio (caída de Embedded Services Processor) a través de un paquete UDP IPv4 manipulado, también conocida como Bug ID CSCsw95482. • http://tools.cisco.com/security/center/viewAlert.x?alertId=40685 • CWE-399: Resource Management Errors •