Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,058 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-20027	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Mar 23, 2023	A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper…
CVE-2023-20049	Cisco Systems, Inc. iOS Xr	Hig	0.56	8.6	0.01	Mar 9, 2023	A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an…
CVE-2022-20803	ClamAV Clamav	Hig	0.56	8.6	0.01	Feb 17, 2023	A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that…
CVE-2023-20020	Cisco Systems, Inc. Broadworks Xtended Services Platform	Hig	0.56	8.6	0.01	Jan 20, 2023	A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. …
CVE-2023-20018	Cisco Systems, Inc. IP Phone 8821 Firmware	Hig	0.56	8.6	0.01	Jan 20, 2023	A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An…
CVE-2022-20947	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.56	8.6	0.01	Nov 15, 2022	A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service…
CVE-2022-20946	Cisco Systems, Inc. FTD	Hig	0.56	8.6	0.01	Nov 15, 2022	A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is…
CVE-2022-20933	Cisco Systems, Inc. Meraki Mx	Hig	0.56	8.6	0.01	Oct 26, 2022	A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient…
CVE-2022-20870	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Oct 10, 2022	A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst 3850, and Catalyst 9000 Family Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a…
CVE-2022-20837	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Oct 10, 2022	A vulnerability in the DNS application layer gateway (ALG) functionality that is used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a logic error…
CVE-2022-20919	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Sep 30, 2022	A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of…
CVE-2022-20856	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Sep 30, 2022	A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) Mobility messages in Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2022-20848	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Sep 30, 2022	A vulnerability in the UDP processing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the…
CVE-2022-20847	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Sep 30, 2022	A vulnerability in the DHCP processing functionality of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the improper processing of…
CVE-2022-20823	Cisco Systems, Inc. NX-OS Software	Hig	0.56	8.6	0.01	Aug 25, 2022	A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets.…
CVE-2022-20770	ClamAV Clamav	Hig	0.56	8.6	0.07	May 4, 2022	On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior…
CVE-2022-20767	Cisco Systems, Inc. Secure Firewall Threat Defense	Hig	0.56	8.6	0.02	May 3, 2022	A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of the DNS…
CVE-2022-20760	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.56	8.6	0.02	May 3, 2022	A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service condition (DoS) on an affected device. This vulnerability is…
CVE-2022-20757	Cisco Systems, Inc. Secure Firewall Threat Defense	Hig	0.56	8.6	0.01	May 3, 2022	A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper traffic handling when…
CVE-2022-20751	Cisco Systems, Inc. Secure Firewall Threat Defense	Hig	0.56	8.6	0.01	May 3, 2022	A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause unlimited memory consumption, which could lead to a denial of service (DoS) condition on an affected device. This…
CVE-2022-20746	Cisco Systems, Inc. Secure Firewall Threat Defense	Hig	0.56	8.6	0.01	May 3, 2022	A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper handling of TCP flows. An attacker could exploit…
CVE-2022-20745	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.56	8.6	0.01	May 3, 2022	A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This…
CVE-2022-20715	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.56	8.6	0.01	May 3, 2022	A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…
CVE-2022-20714	Cisco Systems, Inc. Lightspeed-Plus	Hig	0.56	8.6	0.01	Apr 15, 2022	A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the line card to reset. This vulnerability is due to the incorrect handling of malformed…
CVE-2022-20697	Cisco Systems, Inc. Cisco iOS	Hig	0.56	8.6	0.01	Apr 15, 2022	A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper resource management in the HTTP server code. An…
CVE-2022-20683	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Apr 15, 2022	A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…
CVE-2022-20682	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Apr 15, 2022	A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…
CVE-2022-20678	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Apr 15, 2022	A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of certain TCP segments.…
CVE-2022-20622	Cisco Systems, Inc. Embedded Wireless Controller with Catalyst Access Points Software	Hig	0.56	8.6	0.01	Apr 15, 2022	A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service (DoS) condition. The device may…
CVE-2022-20756	Cisco Systems, Inc. Identity Services Engine Software	Hig	0.56	8.6	0.01	Apr 6, 2022	A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS packets. This vulnerability is due to improper handling of certain RADIUS requests. An attacker…
CVE-2021-34704	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.56	8.6	0.01	Jan 11, 2022	A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to…
CVE-2021-1573	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.56	8.6	0.01	Jan 11, 2022	A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to…
CVE-2021-40118	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.56	8.6	0.01	Oct 27, 2021	A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to…
CVE-2021-40117	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.56	8.6	0.02	Oct 27, 2021	A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…
CVE-2021-40116	Cisco Systems, Inc. Snort	Hig	0.56	8.6	0.01	Oct 27, 2021	Multiple Cisco products are affected by a vulnerability in Snort rules that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.The vulnerability is due to improper handling of the Block with Reset or Interactive…
CVE-2021-34793	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.56	8.6	0.01	Oct 27, 2021	A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service…
CVE-2021-34792	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.56	8.6	0.01	Oct 27, 2021	A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due…
CVE-2021-34783	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Hig	0.56	8.6	0.02	Oct 27, 2021	A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service…
CVE-2021-34781	Cisco Systems, Inc. Firepower Management Center Virtual Appliance	Hig	0.56	8.6	0.01	Oct 27, 2021	A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to…
CVE-2021-34698	Cisco Systems, Inc. Asyncos	Hig	0.56	8.6	0.01	Oct 6, 2021	A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory…
CVE-2021-34769	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Sep 23, 2021	Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2021-34768	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Sep 23, 2021	Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2021-1624	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Sep 23, 2021	A vulnerability in the Rate Limiting Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization in the Cisco QuantumFlow Processor of an affected device, resulting in a denial of service (DoS)…
CVE-2021-1622	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Sep 23, 2021	A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service (DoS) condition. This vulnerability is due…
CVE-2021-1615	Cisco Systems, Inc. Embedded Wireless Controller	Hig	0.56	8.6	0.01	Sep 23, 2021	A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected AP. This vulnerability is due…
CVE-2021-1611	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Sep 23, 2021	A vulnerability in Ethernet over GRE (EoGRE) packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded Wireless Controller, and Embedded Wireless on Catalyst 9000 Series Switches could allow an…
CVE-2021-1565	Cisco Systems, Inc. iOS Xe	Hig	0.56	8.6	0.01	Sep 23, 2021	Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2021-34720	Cisco Systems, Inc. iOS Xr	Hig	0.56	8.6	0.01	Sep 9, 2021	A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) features of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause device packet memory to become exhausted or cause the IP SLA process…
CVE-2021-1588	Cisco Systems, Inc. NX-OS Software	Hig	0.56	8.6	0.01	Aug 25, 2021	A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation…
CVE-2021-1587	Cisco Systems, Inc. NX-OS Software	Hig	0.56	8.6	0.02	Aug 25, 2021	A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to…

CVE-2023-20027HigMar 23, 2023
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper…
CVE-2023-20049HigMar 9, 2023
Cisco Systems, Inc.
iOS Xr
risk 0.56cvss 8.6epss 0.01
A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an…
CVE-2022-20803HigFeb 17, 2023
ClamAV
Clamav
risk 0.56cvss 8.6epss 0.01
A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that…
CVE-2023-20020HigJan 20, 2023
Cisco Systems, Inc.
Broadworks Xtended Services Platform
risk 0.56cvss 8.6epss 0.01
A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. …
CVE-2023-20018HigJan 20, 2023
Cisco Systems, Inc.
IP Phone 8821 Firmware
risk 0.56cvss 8.6epss 0.01
A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An…
CVE-2022-20947HigNov 15, 2022
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.56cvss 8.6epss 0.01
A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service…
CVE-2022-20946HigNov 15, 2022
Cisco Systems, Inc.
FTD
risk 0.56cvss 8.6epss 0.01
A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is…
CVE-2022-20933HigOct 26, 2022
Cisco Systems, Inc.
Meraki Mx
risk 0.56cvss 8.6epss 0.01
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient…
CVE-2022-20870HigOct 10, 2022
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst 3850, and Catalyst 9000 Family Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a…
CVE-2022-20837HigOct 10, 2022
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in the DNS application layer gateway (ALG) functionality that is used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a logic error…
CVE-2022-20919HigSep 30, 2022
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of…
CVE-2022-20856HigSep 30, 2022
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) Mobility messages in Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2022-20848HigSep 30, 2022
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in the UDP processing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the…
CVE-2022-20847HigSep 30, 2022
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in the DHCP processing functionality of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the improper processing of…
CVE-2022-20823HigAug 25, 2022
Cisco Systems, Inc.
NX-OS Software
risk 0.56cvss 8.6epss 0.01
A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets.…
CVE-2022-20770HigMay 4, 2022
ClamAV
Clamav
risk 0.56cvss 8.6epss 0.07
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior…
CVE-2022-20767HigMay 3, 2022
Cisco Systems, Inc.
Secure Firewall Threat Defense
risk 0.56cvss 8.6epss 0.02
A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of the DNS…
CVE-2022-20760HigMay 3, 2022
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.56cvss 8.6epss 0.02
A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service condition (DoS) on an affected device. This vulnerability is…
CVE-2022-20757HigMay 3, 2022
Cisco Systems, Inc.
Secure Firewall Threat Defense
risk 0.56cvss 8.6epss 0.01
A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper traffic handling when…
CVE-2022-20751HigMay 3, 2022
Cisco Systems, Inc.
Secure Firewall Threat Defense
risk 0.56cvss 8.6epss 0.01
A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause unlimited memory consumption, which could lead to a denial of service (DoS) condition on an affected device. This…
CVE-2022-20746HigMay 3, 2022
Cisco Systems, Inc.
Secure Firewall Threat Defense
risk 0.56cvss 8.6epss 0.01
A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper handling of TCP flows. An attacker could exploit…
CVE-2022-20745HigMay 3, 2022
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.56cvss 8.6epss 0.01
A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This…
CVE-2022-20715HigMay 3, 2022
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.56cvss 8.6epss 0.01
A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…
CVE-2022-20714HigApr 15, 2022
Cisco Systems, Inc.
Lightspeed-Plus
risk 0.56cvss 8.6epss 0.01
A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the line card to reset. This vulnerability is due to the incorrect handling of malformed…
CVE-2022-20697HigApr 15, 2022
Cisco Systems, Inc.
Cisco iOS
risk 0.56cvss 8.6epss 0.01
A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper resource management in the HTTP server code. An…
CVE-2022-20683HigApr 15, 2022
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…
CVE-2022-20682HigApr 15, 2022
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…
CVE-2022-20678HigApr 15, 2022
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of certain TCP segments.…
CVE-2022-20622HigApr 15, 2022
Cisco Systems, Inc.
Embedded Wireless Controller with Catalyst Access Points Software
risk 0.56cvss 8.6epss 0.01
A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service (DoS) condition. The device may…
CVE-2022-20756HigApr 6, 2022
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.56cvss 8.6epss 0.01
A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS packets. This vulnerability is due to improper handling of certain RADIUS requests. An attacker…
CVE-2021-34704HigJan 11, 2022
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.56cvss 8.6epss 0.01
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to…
CVE-2021-1573HigJan 11, 2022
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.56cvss 8.6epss 0.01
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to…
CVE-2021-40118HigOct 27, 2021
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.56cvss 8.6epss 0.01
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to…
CVE-2021-40117HigOct 27, 2021
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.56cvss 8.6epss 0.02
A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…
CVE-2021-40116HigOct 27, 2021
Cisco Systems, Inc.
Snort
risk 0.56cvss 8.6epss 0.01
Multiple Cisco products are affected by a vulnerability in Snort rules that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.The vulnerability is due to improper handling of the Block with Reset or Interactive…
CVE-2021-34793HigOct 27, 2021
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.56cvss 8.6epss 0.01
A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service…
CVE-2021-34792HigOct 27, 2021
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.56cvss 8.6epss 0.01
A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due…
CVE-2021-34783HigOct 27, 2021
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.56cvss 8.6epss 0.02
A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service…
CVE-2021-34781HigOct 27, 2021
Cisco Systems, Inc.
Firepower Management Center Virtual Appliance
risk 0.56cvss 8.6epss 0.01
A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to…
CVE-2021-34698HigOct 6, 2021
Cisco Systems, Inc.
Asyncos
risk 0.56cvss 8.6epss 0.01
A vulnerability in the proxy service of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory…
CVE-2021-34769HigSep 23, 2021
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2021-34768HigSep 23, 2021
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2021-1624HigSep 23, 2021
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in the Rate Limiting Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization in the Cisco QuantumFlow Processor of an affected device, resulting in a denial of service (DoS)…
CVE-2021-1622HigSep 23, 2021
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause resource exhaustion, resulting in a denial of service (DoS) condition. This vulnerability is due…
CVE-2021-1615HigSep 23, 2021
Cisco Systems, Inc.
Embedded Wireless Controller
risk 0.56cvss 8.6epss 0.01
A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected AP. This vulnerability is due…
CVE-2021-1611HigSep 23, 2021
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
A vulnerability in Ethernet over GRE (EoGRE) packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded Wireless Controller, and Embedded Wireless on Catalyst 9000 Series Switches could allow an…
CVE-2021-1565HigSep 23, 2021
Cisco Systems, Inc.
iOS Xe
risk 0.56cvss 8.6epss 0.01
Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVE-2021-34720HigSep 9, 2021
Cisco Systems, Inc.
iOS Xr
risk 0.56cvss 8.6epss 0.01
A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) features of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause device packet memory to become exhausted or cause the IP SLA process…
CVE-2021-1588HigAug 25, 2021
Cisco Systems, Inc.
NX-OS Software
risk 0.56cvss 8.6epss 0.01
A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation…
CVE-2021-1587HigAug 25, 2021
Cisco Systems, Inc.
NX-OS Software
risk 0.56cvss 8.6epss 0.02
A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to…

Page 17 of 142