VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,231 total · sorted by risk
  • CVE-2005-4794Dec 31, 2005
    Cisco Systems, Inc.
    Ata
    risk 0.00cvss —epss 0.02

    Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote attackers to cause a denial of service (crash or instability) via a compressed DNS packet with a label length byte with an incorrect offset.

  • CVE-2005-4499Dec 22, 2005
    Cisco Systems, Inc.
    Secure Access Control Server
    risk 0.00cvss —epss 0.02

    The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers…

  • CVE-2005-4437Dec 21, 2005
    Extended Interior Gateway Routing Protocol
    Extended Interior Gateway Routing Protocol
    risk 0.00cvss —epss 0.02

    MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP…

  • CVE-2005-4436Dec 21, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS after 12.3(2), 12.3(3)B, and 12.3(2)T and other products, allows remote attackers to cause a denial of service by sending a "spoofed neighbor announcement" with (1) mismatched k values or (2)…

  • CVE-2005-4332Dec 17, 2005
    Cisco Systems, Inc.
    Clean Access
    risk 0.00cvss —epss 0.04

    Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP files including (1) admin/uploadclient.jsp, (2) apply_firmware_action.jsp, and (3)…

  • CVE-2005-4258Dec 15, 2005
    Cisco Systems, Inc.
    Catalyst
    risk 0.00cvss —epss 0.02

    Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD). NOTE: the provenance of this issue is unknown; the details are…

  • CVE-2005-3921Nov 30, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arbitrary web script or HTML by (1) packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by…

  • CVE-2005-3886Nov 29, 2005
    Cisco Systems, Inc.
    Security Agent
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Cisco Security Agent (CSA) 4.5.0 and 4.5.1 agents, when running on Windows systems, allows local users to bypass protections and gain system privileges by executing certain local software.

  • CVE-2005-3804Nov 24, 2005
    Cisco Systems, Inc.
    IP Phone
    risk 0.00cvss —epss 0.03

    Cisco IP Phone (VoIP) 7920 1.0(8) listens to UDP port 17185 to support a VxWorks debugger, which allows remote attackers to obtain sensitive information and cause a denial of service.

  • CVE-2005-3788Nov 24, 2005
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Race condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attackers to cause a denial of service (standby firewall failure) by sending spoofed…

  • CVE-2005-3669Nov 18, 2005
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for…

  • CVE-2005-3482Nov 3, 2005
    Cisco Systems, Inc.
    Airespace WLAN Controller
    risk 0.00cvss —epss 0.02

    Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using…

  • CVE-2005-3426Nov 2, 2005
    Cisco Systems, Inc.
    Content Services Switch 11500
    risk 0.00cvss —epss 0.01

    Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote attackers to cause a denial of service (memory corruption and device reload) via a malformed client certificate during SSL session negotiation.

  • CVE-2005-3427Nov 2, 2005
    Cisco Systems, Inc.
    IPS MC
    risk 0.00cvss —epss 0.00

    The Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection.

  • CVE-2005-2695Aug 26, 2005
    Cisco Systems, Inc.
    Ciscoworks Management Center For Ids Sensors
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS Sensors (IDSMC) 2.0 and 2.1, and Monitoring Center for Security (Security Monitor or Secmon) 1.1 through 2.0 and 2.1, allows remote attackers to spoof a Cisco…

  • CVE-2005-2681Aug 23, 2005
    Cisco Systems, Inc.
    Intrusion Prevention System
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System 5.0(1) and 5.0(2) allows local users with OPERATOR or VIEWER privileges to gain additional privileges via unknown vectors.

  • CVE-2005-2631Aug 23, 2005
    Cisco Systems, Inc.
    Clean Access
    risk 0.00cvss —epss 0.02

    Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.

  • CVE-2005-2451Aug 3, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly execute arbitrary code via a crafted IPv6 packet.

  • CVE-2005-2280Jul 18, 2005
    Cisco Systems, Inc.
    Security Agent
    risk 0.00cvss —epss 0.01

    Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a crafted IP packet.

  • CVE-2005-2279Jul 18, 2005
    Cisco Systems, Inc.
    ONS 15216 Optical Add/Drop Multiplexer (OADM)
    risk 0.00cvss —epss 0.02

    Cisco ONS 15216 Optical Add/Drop Multiplexer (OADM) running firmware 2.2.2 and earlier allows remote attackers to cause a denial of service (management plane session loss) via crafted telnet data.

  • CVE-2005-2243Jul 12, 2005
    Cisco Systems, Inc.
    Unified Callmanager
    risk 0.00cvss —epss 0.01

    Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote attackers to cause a denial of service (memory consumption) via a large number…

  • CVE-2005-2241Jul 12, 2005
    Cisco Systems, Inc.
    Unified Callmanager
    risk 0.00cvss —epss 0.01

    Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does not quickly time out Realtime Information Server Data Collection (RISDC) sockets, which results in a "resource leak" that allows remote attackers to cause a…

  • CVE-2005-2244Jul 12, 2005
    Cisco Systems, Inc.
    Unified Callmanager
    risk 0.00cvss —epss 0.03

    The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to execute arbitrary code or corrupt memory via crafted packets that trigger a memory allocation failure…

  • CVE-2005-2105Jul 5, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 12.2T through 12.4 allows remote attackers to bypass Authentication, Authorization, and Accounting (AAA) RADIUS authentication, if the fallback method is set to none, via a long username.

  • CVE-2005-2025Jun 20, 2005
    Cisco Systems, Inc.
    VPN 3030 Concentator
    risk 0.00cvss —epss 0.02

    Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid…

  • CVE-2005-1942Jun 10, 2005
    Cisco Systems, Inc.
    switches
    risk 0.00cvss —epss 0.02

    Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol (CDP) messages.

  • CVE-2005-1517May 11, 2005
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    Unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL, FTP, or HTTPS filtering exceptions, allows certain TCP packets to bypass access control lists (ACLs).

  • CVE-2005-0599May 2, 2005
    Cisco Systems, Inc.
    Application And Content Networking Software
    risk 0.00cvss —epss 0.02

    Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (CPU consumption) via malformed IP packets.

  • CVE-2005-0196May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.04

    Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attackers to cause a denial of service (device reload) via a malformed BGP packet.

  • CVE-2005-0612May 2, 2005
    Cisco Systems, Inc.
    IP/VC Videoconferencing System
    risk 0.00cvss —epss 0.02

    Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attackers to gain access, cause a denial of service, and modify configuration.

  • CVE-2005-1058May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2…

  • CVE-2005-1020May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently…

  • CVE-2005-0601May 2, 2005
    Cisco Systems, Inc.
    Application And Content Networking Software
    risk 0.00cvss —epss 0.02

    Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog has not been run, which allows remote attackers to gain access.

  • CVE-2005-0197May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS) installed but disabled, allows remote attackers to cause a denial of service (device reload) via a crafted packet sent to the disabled interface.

  • CVE-2005-0195May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.04

    Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service (device restart) via a crafted IPv6 packet.

  • CVE-2005-1021May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.

  • CVE-2005-1057May 2, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet."

  • CVE-2005-0597May 2, 2005
    Cisco Systems, Inc.
    Application And Content Networking Software
    risk 0.00cvss —epss 0.03

    Cisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (process restart) via a "crafted TCP connection."

  • CVE-2005-0943Mar 30, 2005
    Cisco Systems, Inc.
    VPN 3030 Concentator
    risk 0.00cvss —epss 0.02

    Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.

  • CVE-2005-0600Feb 24, 2005
    Cisco Systems, Inc.
    Content Distribution Manager 4630
    risk 0.00cvss —epss 0.02

    Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service (bandwidth consumption) via "crafted IP packets" that are continuously forwarded.

  • CVE-2005-0598Feb 24, 2005
    Cisco Systems, Inc.
    Content Distribution Manager 4630
    risk 0.00cvss —epss 0.03

    The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause a denial of service (CPU consumption) via malformed packets.

  • CVE-2005-0186Jan 19, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Telephony (SRST), allows remote attackers to cause a denial of service (device reboot) via a malformed packet to the SCCP port.

  • CVE-2004-1112Jan 10, 2005
    Cisco Systems, Inc.
    Security Agent
    risk 0.00cvss —epss 0.01

    The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks…

  • CVE-2004-1164Jan 10, 2005
    Cisco Systems, Inc.
    Cns Network Registrar
    risk 0.00cvss —epss 0.02

    The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (process crash) via a certain "unexpected packet sequence."

  • CVE-2004-1163Jan 10, 2005
    Cisco Systems, Inc.
    Cns Network Registrar
    risk 0.00cvss —epss 0.01

    Cisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (CPU consumption) by ending a connection after sending a certain sequence of packets.

  • CVE-2004-1111Jan 10, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of…

  • CVE-2004-1433Dec 31, 2004
    Cisco Systems, Inc.
    Ons 15600
    risk 0.00cvss —epss 0.04

    Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, and ONS 15600 1.x(x), allows remote attackers to cause a denial of service (control card reset) via malformed (1)…

  • CVE-2004-1436Dec 31, 2004
    Cisco Systems, Inc.
    Optical Networking Systems Software
    risk 0.00cvss —epss 0.03

    The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than…

  • CVE-2004-1432Dec 31, 2004
    Cisco Systems, Inc.
    Optical Networking Systems Software
    risk 0.00cvss —epss 0.04

    Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via malformed (1) IP or (2) ICMP packets.

  • CVE-2004-1459Dec 31, 2004
    Cisco Systems, Inc.
    ACS
    risk 0.00cvss —epss 0.02

    Cisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible Authentication Protocol (LEAP) RADIUS proxy, allows remote attackers to cause a denial of service (device crash) via certain LEAP authentication requests.

Page 141 of 145