CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2019-1712 – Cisco IOS XR Software Protocol Independent Multicast Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2019-1712
17 Apr 2019 — A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the PIM process to restart, resulting in a denial of service condition on an affected device. The vulnerability is due to the incorrect processing of crafted AutoRP packets. An attacker could exploit this vulnerability by sending crafted packets to port UDP 496 on a reachable IP address on the device. A successful exploit could allow the attacker to cause the ... • http://www.securityfocus.com/bid/108025 • CWE-20: Improper Input Validation •
CVSS: 8.6EPSS: 0%CPEs: 12EXPL: 0CVE-2019-1686 – Cisco ASR 9000 Series Aggregation Services Routers ACL Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2019-1686
17 Apr 2019 — A vulnerability in the TCP flags inspection feature for access control lists (ACLs) on Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected device. The vulnerability is due to incorrect processing of the ACL applied to an interface of an affected device when Cisco Express Forwarding load balancing using the 3-tuple hash algorithm is enabled. An attacker could exploit this vulnerability by sending tr... • http://www.securityfocus.com/bid/108026 • CWE-284: Improper Access Control •
CVSS: 9.8EPSS: 2%CPEs: 3EXPL: 0CVE-2019-1710 – Cisco IOS XR 64-Bit Software for Cisco ASR 9000 Series Aggregation Services Routers Network Isolation Vulnerability
https://notcve.org/view.php?id=CVE-2019-1710
17 Apr 2019 — A vulnerability in the sysadmin virtual machine (VM) on Cisco ASR 9000 Series Aggregation Services Routers running Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to access internal applications running on the sysadmin VM. The vulnerability is due to incorrect isolation of the secondary management interface from internal sysadmin applications. An attacker could exploit this vulnerability by connecting to one of the listening internal applications. A successful exploit could resu... • http://www.securityfocus.com/bid/108007 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 7%CPEs: 1EXPL: 0CVE-2019-1681 – Cisco Network Convergence System 1000 Series TFTP Directory Traversal Vulnerability
https://notcve.org/view.php?id=CVE-2019-1681
21 Feb 2019 — A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of user-supplied input within TFTP requests processed by the affected software. An attacker could exploit this vulnerability by using directory traversal techniques in malicious requests sent to the TFTP service on a target... • http://www.securityfocus.com/bid/107107 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.6EPSS: 1%CPEs: 11EXPL: 0CVE-2018-0418
https://notcve.org/view.php?id=CVE-2018-0418
15 Aug 2018 — A vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000 Series Aggregation Services Router Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input and validation checking on certain Precision Time Protocol (PTP) ingress traffic to an affected device. An attacker could exploit this vulnerability by injecting malformed traffic into an affected device. A successfu... • http://www.securityfocus.com/bid/105185 • CWE-20: Improper Input Validation CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.4EPSS: 0%CPEs: 21EXPL: 0CVE-2018-0241
https://notcve.org/view.php?id=CVE-2018-0241
19 Apr 2018 — A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to improper handling of UDP broadcast packets that are forwarded to an IPv4 helper address. An attacker could exploit this vulnerability by sending multiple UDP broadcast packets to the affected device. An exploit could allow the attacker to cause a buffer leak on the affected device, ... • http://www.securityfocus.com/bid/103929 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2017-6731
https://notcve.org/view.php?id=CVE-2017-6731
10 Jul 2017 — A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the MSDP session to be unexpectedly reset, causing a short denial of service (DoS) condition. The MSDP session will restart within a few seconds. More Information: CSCvd94828. Known Affected Releases: 4.3.2.MCAST 6.0.2.BASE. Known Fixed Releases: 6.3.1.19i.MCAST 6.2.3.1i.MCAST 6.2.2.17i.MCAST 6.1.4.12i.MCAST. • http://www.securitytracker.com/id/1038820 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 92%CPEs: 5EXPL: 3CVE-2016-6415 – Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2016-6415
19 Sep 2016 — The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN. La implementación del servidor IKEv1 en Cisco IOS 12.2 hasta la versión 12.4 y 15.0 hasta la versión 15.6, IOS XE hasta la versión 3.18S, IOS XR 4.3.x y 5.0.x hast... • https://packetstorm.news/files/id/180932 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 1%CPEs: 14EXPL: 0CVE-2016-6355
https://notcve.org/view.php?id=CVE-2016-6355
23 Aug 2016 — Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service (control-plane protocol outage) via crafted fragmented packets, aka Bug ID CSCux26791. Fuga de memoria en dispositivos Cisco IOS XR 5.1.x hasta la versión 5.1.3, 5.2.x hasta la versión 5.2.5 y 5.3.x hasta la versión 5.3.2 en ASR 9001 permite a atacantes remotos provocar una denegación de servicio (corte de protocolo de plano de control) a trav... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160810-iosxr • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0CVE-2016-1426
https://notcve.org/view.php?id=CVE-2016-1426
15 Jul 2016 — Cisco IOS XR 5.x through 5.2.5 on NCS 6000 devices allows remote attackers to cause a denial of service (timer consumption and Route Processor reload) via crafted SSH traffic, aka Bug ID CSCux76819. Cisco IOS XR 5.x hasta la versión 5.2.5 en dispositivos NCS 6000 permite a atacantes remotos provocar una denegación de servicio (consumo del temporizador y recarga de Route Processor) a través de tráfico SSH manipulado, también conocido como Bug ID CSCux76819. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160713-ncs6k • CWE-399: Resource Management Errors •