CVSS: 7.5EPSS: 5%CPEs: 22EXPL: 0CVE-2010-3035 – Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
https://notcve.org/view.php?id=CVE-2010-3035
30 Aug 2010 — Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211. Cisco IOS XR v3.4.0 hasta la versión v3.9.1, si BGP está activado, no maneja apropiadamente los atributos transitivos no reconocidos, lo que permite a atacantes remotos provocar una denegació... • http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 2%CPEs: 186EXPL: 0CVE-2010-0576
https://notcve.org/view.php?id=CVE-2010-0576
25 Mar 2010 — Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching (MPLS) and Label Distribution Protocol (LDP) are enabled, allows remote attackers to cause a denial of service (device reload or process restart) via a crafted LDP packet, aka Bug IDs CSCsz45567 and CSCsj25893. Vulnerabilidad no especificada en Cisco IOS v12.0 hasta v12.4, IOS XE v2.1.x hasta v2.3.x hasta v2.3.2 e IOS XR v3.2.x hasta v3.4.3, cu... • http://osvdb.org/63188 •
CVSS: 7.5EPSS: 0%CPEs: 19EXPL: 0CVE-2009-1154
https://notcve.org/view.php?id=CVE-2009-1154
21 Aug 2009 — Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute. Cisco IOS XR 3.8.1 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caida de proceso) mediante un mensaje BGP UPDATE, como se ha demostrado con un mensaje con muchos números AS en el AS Path Attribute. • http://securitytracker.com/id?1022756 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.5EPSS: 0%CPEs: 33EXPL: 0CVE-2009-2056
https://notcve.org/view.php?id=CVE-2009-2056
21 Aug 2009 — Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path. Cisco IOS XR 3.8.1 y versiones anteriores permite a atacantes remotos autenticados provocar una denegación de servicio (caida de proceso) mediante vectores relacionados con un mensaje BGP UPDATE con muchos números AS al comienzo de la ruta AS. • http://securitytracker.com/id?1022756 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 0%CPEs: 19EXPL: 0CVE-2009-2055 – Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
https://notcve.org/view.php?id=CVE-2009-2055
19 Aug 2009 — Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009. Cisco IOS XR desde la v3.4.0 hasta la v3.8.1 permite a atacantes remotos producir una denegación de servicio (reset de sesión) a través de el mensaje BGP UPDATE con un atributo invalido, como se demostró el 17 de Agosto de 2009. Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers t... • http://mailman.nanog.org/pipermail/nanog/2009-August/012719.html • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 96%CPEs: 165EXPL: 2CVE-2008-0960 – SNMPv3 - HMAC Validation error Remote Authentication Bypass
https://notcve.org/view.php?id=CVE-2008-0960
10 Jun 2008 — SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relie... • https://www.exploit-db.com/exploits/5790 • CWE-287: Improper Authentication •
CVSS: 7.5EPSS: 2%CPEs: 22EXPL: 1CVE-2007-4430 – Cisco IOS 12.3 - Show IP BGP Regexp Remote Denial of Service
https://notcve.org/view.php?id=CVE-2007-4430
20 Aug 2007 — Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environments with anonymous telnet and Looking Glass access. Una vulnerabilidad no especificada en Cisco IOS versiones 12.0 hasta 12.4, permite a atacantes dependiendo del contexto causar una denegación de servicio (reinicio... • https://www.exploit-db.com/exploits/30506 • CWE-20: Improper Input Validation •