VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,058 total · sorted by risk
  • CVE-2005-2105Jul 5, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 12.2T through 12.4 allows remote attackers to bypass Authentication, Authorization, and Accounting (AAA) RADIUS authentication, if the fallback method is set to none, via a long username.

  • CVE-2005-2025Jun 20, 2005
    Cisco Systems, Inc.
    VPN 3030 Concentator
    risk 0.00cvss —epss 0.02

    Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid…

  • CVE-2005-1942Jun 10, 2005
    Cisco Systems, Inc.
    switches
    risk 0.00cvss —epss 0.02

    Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol (CDP) messages.

  • CVE-2005-1517May 11, 2005
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    Unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL, FTP, or HTTPS filtering exceptions, allows certain TCP packets to bypass access control lists (ACLs).

  • CVE-2005-1021May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.

  • CVE-2005-1058May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2…

  • CVE-2005-0197May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS) installed but disabled, allows remote attackers to cause a denial of service (device reload) via a crafted packet sent to the disabled interface.

  • CVE-2005-0612May 2, 2005
    Cisco Systems, Inc.
    IP/VC Videoconferencing System
    risk 0.00cvss —epss 0.02

    Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attackers to gain access, cause a denial of service, and modify configuration.

  • CVE-2005-1020May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently…

  • CVE-2005-0601May 2, 2005
    Cisco Systems, Inc.
    Application And Content Networking Software
    risk 0.00cvss —epss 0.02

    Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog has not been run, which allows remote attackers to gain access.

  • CVE-2005-1057May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet."

  • CVE-2005-0597May 2, 2005
    Cisco Systems, Inc.
    Application And Content Networking Software
    risk 0.00cvss —epss 0.03

    Cisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (process restart) via a "crafted TCP connection."

  • CVE-2005-0195May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.04

    Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service (device restart) via a crafted IPv6 packet.

  • CVE-2005-0196May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.04

    Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attackers to cause a denial of service (device reload) via a malformed BGP packet.

  • CVE-2005-0599May 2, 2005
    Cisco Systems, Inc.
    Application And Content Networking Software
    risk 0.00cvss —epss 0.02

    Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (CPU consumption) via malformed IP packets.

  • CVE-2005-0943Mar 30, 2005
    Cisco Systems, Inc.
    VPN 3030 Concentator
    risk 0.00cvss —epss 0.02

    Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.

  • CVE-2005-0600Feb 24, 2005
    Cisco Systems, Inc.
    Content Distribution Manager 4630
    risk 0.00cvss —epss 0.02

    Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service (bandwidth consumption) via "crafted IP packets" that are continuously forwarded.

  • CVE-2005-0598Feb 24, 2005
    Cisco Systems, Inc.
    Content Distribution Manager 4630
    risk 0.00cvss —epss 0.03

    The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause a denial of service (CPU consumption) via malformed packets.

  • CVE-2005-0186Jan 19, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Telephony (SRST), allows remote attackers to cause a denial of service (device reboot) via a malformed packet to the SCCP port.

  • CVE-2004-1112Jan 10, 2005
    Cisco Systems, Inc.
    Security Agent
    risk 0.00cvss —epss 0.01

    The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks…

  • CVE-2004-1111Jan 10, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of…

  • CVE-2004-1164Jan 10, 2005
    Cisco Systems, Inc.
    Cns Network Registrar
    risk 0.00cvss —epss 0.02

    The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (process crash) via a certain "unexpected packet sequence."

  • CVE-2004-1163Jan 10, 2005
    Cisco Systems, Inc.
    Cns Network Registrar
    risk 0.00cvss —epss 0.01

    Cisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (CPU consumption) by ending a connection after sending a certain sequence of packets.

  • CVE-2004-1461Dec 31, 2004
    Cisco Systems, Inc.
    Secure Access Control Server
    risk 0.00cvss —epss 0.02

    Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address.

  • CVE-2004-1458Dec 31, 2004
    Cisco Systems, Inc.
    Secure Access Control Server
    risk 0.00cvss —epss 0.02

    The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a denial of service (hang) via a flood of TCP connections to port 2002.

  • CVE-2004-1433Dec 31, 2004
    Cisco Systems, Inc.
    Ons 15600
    risk 0.00cvss —epss 0.04

    Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, and ONS 15600 1.x(x), allows remote attackers to cause a denial of service (control card reset) via malformed (1)…

  • CVE-2004-1435Dec 31, 2004
    Cisco Systems, Inc.
    Optical Networking Systems Software
    risk 0.00cvss —epss 0.03

    Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via a large number of TCP connections with…

  • CVE-2004-1434Dec 31, 2004
    Cisco Systems, Inc.
    Optical Networking Systems Software
    risk 0.00cvss —epss 0.03

    Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.1(0) to 4.1(2), 4.5(x), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via malformed SNMP packets.

  • CVE-2004-1432Dec 31, 2004
    Cisco Systems, Inc.
    Optical Networking Systems Software
    risk 0.00cvss —epss 0.04

    Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via malformed (1) IP or (2) ICMP packets.

  • CVE-2004-1459Dec 31, 2004
    Cisco Systems, Inc.
    ACS
    risk 0.00cvss —epss 0.02

    Cisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible Authentication Protocol (LEAP) RADIUS proxy, allows remote attackers to cause a denial of service (device crash) via certain LEAP authentication requests.

  • CVE-2004-1454Dec 31, 2004
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 12.0S, 12.2, and 12.3, with Open Shortest Path First (OSPF) enabled, allows remote attackers to cause a denial of service (device reload) via a malformed OSPF packet.

  • CVE-2004-1460Dec 31, 2004
    Cisco Systems, Inc.
    Secure Access Control Server
    risk 0.00cvss —epss 0.02

    Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password.

  • CVE-2004-1436Dec 31, 2004
    Cisco Systems, Inc.
    Optical Networking Systems Software
    risk 0.00cvss —epss 0.03

    The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than…

  • CVE-2004-1775Dec 31, 2004
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string.

  • CVE-2004-1322Dec 15, 2004
    Cisco Systems, Inc.
    Unity
    risk 0.00cvss —epss 0.02

    Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.

  • CVE-2004-0308Nov 24, 2004
    Cisco Systems, Inc.
    Optical Networking Systems Software
    risk 0.00cvss —epss 0.02

    Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0) allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks…

  • CVE-2004-0307Nov 23, 2004
    Cisco Systems, Inc.
    Optical Networking Systems Software
    risk 0.00cvss —epss 0.02

    Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service (reset) by not sending the ACK portion of the TCP three-way handshake and sending an invalid response instead.

  • CVE-2004-0306Nov 23, 2004
    Cisco Systems, Inc.
    Ons 15600
    risk 0.00cvss —epss 0.02

    Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1…

  • CVE-2004-0352Nov 23, 2004
    Cisco Systems, Inc.
    Webns
    risk 0.00cvss —epss 0.03

    Cisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) before 05.0(04.07)S, and 6.10(x) before 06.10(02.05)S allow remote attackers to cause a denial of service (device reset) via a malformed packet to UDP port 5002.

  • CVE-2004-0589Aug 6, 2004
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of service (device reload) via malformed BGP (1) OPEN or (2) UPDATE messages.

  • CVE-2004-0650Aug 6, 2004
    Newatlanta
    Servletexec
    risk 0.00cvss —epss 0.03

    UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL.

  • CVE-2004-0551Aug 6, 2004
    Cisco Systems, Inc.
    Catos
    risk 0.00cvss —epss 0.03

    Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1)…

  • CVE-2004-0714Jul 27, 2004
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports (UDP 162 and a randomly chosen UDP port), which allows remote attackers to cause a denial of service (device reload and memory corruption).

  • CVE-2004-0710Jul 27, 2004
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before 12.2(17b)SXA, before 12.2(17d)SXB, or before 12.2(14)SY03 could allow remote attackers to cause a denial of service (device crash and…

  • CVE-2004-0391Jun 1, 2004
    Cisco Systems, Inc.
    Wireless Lan Solution Engine
    risk 0.00cvss —epss 0.05

    Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration.

  • CVE-2004-0054Feb 17, 2004
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.05

    Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

  • CVE-2004-0013Feb 3, 2004
    Cisco Systems, Inc.
    Jabber
    risk 0.00cvss —epss 0.02

    jabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL connections, which allows remote attackers to cause a denial of service (crash).

  • CVE-2004-0044Feb 3, 2004
    Cisco Systems, Inc.
    Personal Assistant
    risk 0.00cvss —epss 0.02

    Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with…

  • CVE-2004-1759Jan 21, 2004
    IBM
    Director Agent
    risk 0.00cvss —epss 0.02

    Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning.

  • CVE-2004-1760Jan 21, 2004
    IBM
    Director Agent
    risk 0.00cvss —epss 0.04

    The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.

Page 138 of 142