Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,226 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-1783	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient…
CVE-2019-1782	Cisco Systems, Inc. FXOS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments…
CVE-2019-1781	Cisco Systems, Inc. FXOS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments…
CVE-2019-1779	Cisco Systems, Inc. FXOS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device with elevated privileges. The vulnerability is due to insufficient…
CVE-2019-1778	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a…
CVE-2019-1776	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a…
CVE-2019-1775	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1774	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1770	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient…
CVE-2019-1769	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system of an attached line card with the privilege level of root. The vulnerability is…
CVE-2019-1767	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.01	May 15, 2019	A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute…
CVE-2019-1730	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands at the privilege level of a network-admin user outside of the Guest Shell.…
CVE-2019-1728	Cisco Systems, Inc. FXOS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the Secure Configuration Validation functionality of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to run arbitrary commands at system boot time with the privileges of root. The vulnerability is due to a lack of…
CVE-2019-1727	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.01	May 15, 2019	A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of…
CVE-2019-1649	Microsoft Secure Boot	Med	0.44	6.7	0.01	May 13, 2019	A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability affects multiple…
CVE-2019-1803	Cisco Systems, Inc. Nexus 9000 Series ACI Mode Switch Software	Med	0.44	6.7	0.00	May 3, 2019	A vulnerability in the filesystem management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an authenticated, local attacker with administrator rights to gain elevated privileges as the root user on an affected device.…
CVE-2019-1699	Cisco Systems, Inc. Firepower Threat Defense Software	Med	0.44	6.7	0.01	May 3, 2019	A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting…
CVE-2019-1697	Cisco Systems, Inc. Adaptive Security Appliance Cx Context Aware Security Software	Med	0.44	6.8	0.02	May 3, 2019	A vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to…
CVE-2019-1829	Cisco Systems, Inc. Aironet 3800 Series Access Points	Med	0.44	6.7	0.00	Apr 18, 2019	A vulnerability in the CLI of Cisco Aironet Series Access Points (APs) could allow an authenticated, local attacker to gain access to the underlying Linux operating system (OS) without the proper authentication. The attacker would need valid administrator device credentials. The…
CVE-2019-1826	Cisco Systems, Inc. Aironet 1560 Series Access Points	Med	0.44	6.8	0.01	Apr 18, 2019	A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation on QoS…
CVE-2019-1720	Cisco Systems, Inc. Telepresence Video Communication Server	Med	0.44	6.8	0.02	Apr 18, 2019	A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service (DoS) condition on an affected system.…
CVE-2018-0248	Cisco Systems, Inc. Wireless Lan Controller Software	Med	0.44	6.8	0.02	Apr 17, 2019	A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is using this GUI, causing…
CVE-2019-1760	Cisco Systems, Inc. iOS Xr Software	Med	0.44	6.8	0.02	Mar 28, 2019	A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this…
CVE-2019-1615	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Mar 11, 2019	A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability is due to improper verification of…
CVE-2019-1613	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Mar 11, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1611	Cisco Systems, Inc. FXOS Software	Med	0.44	6.7	0.00	Mar 11, 2019	A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed…
CVE-2019-1610	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Mar 11, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1609	Cisco Systems, Inc. MDS 9000 Series Multilayer Switches	Med	0.44	6.7	0.01	Mar 8, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1608	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Mar 8, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1607	Cisco Systems, Inc. Nx OS	Med	0.44	6.7	0.00	Mar 8, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1585	Cisco Systems, Inc. Nexus 9000 Series ACI Mode Switch Software	Med	0.44	6.7	0.00	Mar 6, 2019	A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of…
CVE-2019-1676	Cisco Systems, Inc. Meeting Server	Med	0.44	6.8	0.02	Feb 8, 2019	A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Cisco Meeting Server. The vulnerability is due to insufficient…
CVE-2018-0282	Cisco Systems, Inc. Cisco iOS	Med	0.44	6.8	0.02	Jan 10, 2019	A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state.…
CVE-2018-0381	Cisco Systems, Inc. Aironet 1560 Series Access Points	Med	0.44	6.8	0.01	Oct 17, 2018	A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a deadlock condition that…
CVE-2018-15428	Cisco Systems, Inc. iOS Xr Software	Med	0.44	6.8	0.02	Oct 5, 2018	A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain BGP update…
CVE-2018-15399	Cisco Systems, Inc. Adaptive Security Appliance (ASA) Software	Med	0.44	6.8	0.02	Oct 5, 2018	A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service…
CVE-2018-15397	Cisco Systems, Inc. Adaptive Security Appliance (ASA) Software	Med	0.44	6.8	0.01	Oct 5, 2018	A vulnerability in the implementation of Traffic Flow Confidentiality (TFC) over IPsec functionality in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device…
CVE-2018-15396	Cisco Systems, Inc. Unity Connection	Med	0.44	6.8	0.02	Oct 5, 2018	A vulnerability in the Bulk Administration Tool (BAT) for Cisco Unity Connection could allow an authenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software does not…
CVE-2018-15390	Cisco Systems, Inc. Firepower Threat Defense Software	Med	0.44	6.8	0.01	Oct 5, 2018	A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected…
CVE-2018-15376	Cisco Systems, Inc. Cisco IOS XE Software	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The…
CVE-2018-15375	Cisco Systems, Inc. Cisco IOS XE Software	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The…
CVE-2018-15374	Cisco Systems, Inc. iOS Xr Software	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install a malicious software image or file on an affected device. The vulnerability is due to the affected software improperly verifying digital signatures…
CVE-2018-15371	Cisco Systems, Inc. iOS Xr Software	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has…
CVE-2018-15370	Cisco Systems, Inc. Cisco Catalyst 6800 Series Switches	Med	0.44	6.8	0.00	Oct 5, 2018	A vulnerability in Cisco IOS ROM Monitor (ROMMON) Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due…
CVE-2018-15369	Cisco Systems, Inc. Cisco iOS	Med	0.44	6.8	0.02	Oct 5, 2018	A vulnerability in the TACACS+ client subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling…
CVE-2018-15368	Cisco Systems, Inc. iOS Xr Software	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected…
CVE-2018-0481	Cisco Systems, Inc. iOS Xr Software	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes…
CVE-2018-0477	Cisco Systems, Inc. iOS Xr Software	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes…
CVE-2018-0469	Cisco Systems, Inc. iOS Xr Software	Med	0.44	6.8	0.03	Oct 5, 2018	A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a double-free-in-memory handling by the affected software when specific HTTP requests are…
CVE-2018-0428	Cisco Systems, Inc. Web Security Appliance	Med	0.44	6.7	0.00	Aug 15, 2018	A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to elevate privileges to root. The attacker must authenticate with valid administrator credentials. The vulnerability is due to improper…

CVE-2019-1783MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient…
CVE-2019-1782MedMay 15, 2019
Cisco Systems, Inc.
FXOS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments…
CVE-2019-1781MedMay 15, 2019
Cisco Systems, Inc.
FXOS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments…
CVE-2019-1779MedMay 15, 2019
Cisco Systems, Inc.
FXOS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device with elevated privileges. The vulnerability is due to insufficient…
CVE-2019-1778MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a…
CVE-2019-1776MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a…
CVE-2019-1775MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1774MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1770MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient…
CVE-2019-1769MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system of an attached line card with the privilege level of root. The vulnerability is…
CVE-2019-1767MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.01
A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute…
CVE-2019-1730MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands at the privilege level of a network-admin user outside of the Guest Shell.…
CVE-2019-1728MedMay 15, 2019
Cisco Systems, Inc.
FXOS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Secure Configuration Validation functionality of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to run arbitrary commands at system boot time with the privileges of root. The vulnerability is due to a lack of…
CVE-2019-1727MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.01
A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of…
CVE-2019-1649MedMay 13, 2019
Microsoft
Secure Boot
risk 0.44cvss 6.7epss 0.01
A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability affects multiple…
CVE-2019-1803MedMay 3, 2019
Cisco Systems, Inc.
Nexus 9000 Series ACI Mode Switch Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the filesystem management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an authenticated, local attacker with administrator rights to gain elevated privileges as the root user on an affected device.…
CVE-2019-1699MedMay 3, 2019
Cisco Systems, Inc.
Firepower Threat Defense Software
risk 0.44cvss 6.7epss 0.01
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting…
CVE-2019-1697MedMay 3, 2019
Cisco Systems, Inc.
Adaptive Security Appliance Cx Context Aware Security Software
risk 0.44cvss 6.8epss 0.02
A vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to…
CVE-2019-1829MedApr 18, 2019
Cisco Systems, Inc.
Aironet 3800 Series Access Points
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco Aironet Series Access Points (APs) could allow an authenticated, local attacker to gain access to the underlying Linux operating system (OS) without the proper authentication. The attacker would need valid administrator device credentials. The…
CVE-2019-1826MedApr 18, 2019
Cisco Systems, Inc.
Aironet 1560 Series Access Points
risk 0.44cvss 6.8epss 0.01
A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation on QoS…
CVE-2019-1720MedApr 18, 2019
Cisco Systems, Inc.
Telepresence Video Communication Server
risk 0.44cvss 6.8epss 0.02
A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service (DoS) condition on an affected system.…
CVE-2018-0248MedApr 17, 2019
Cisco Systems, Inc.
Wireless Lan Controller Software
risk 0.44cvss 6.8epss 0.02
A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is using this GUI, causing…
CVE-2019-1760MedMar 28, 2019
Cisco Systems, Inc.
iOS Xr Software
risk 0.44cvss 6.8epss 0.02
A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this…
CVE-2019-1615MedMar 11, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability is due to improper verification of…
CVE-2019-1613MedMar 11, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1611MedMar 11, 2019
Cisco Systems, Inc.
FXOS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed…
CVE-2019-1610MedMar 11, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1609MedMar 8, 2019
Cisco Systems, Inc.
MDS 9000 Series Multilayer Switches
risk 0.44cvss 6.7epss 0.01
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1608MedMar 8, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1607MedMar 8, 2019
Cisco Systems, Inc.
Nx OS
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1585MedMar 6, 2019
Cisco Systems, Inc.
Nexus 9000 Series ACI Mode Switch Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of…
CVE-2019-1676MedFeb 8, 2019
Cisco Systems, Inc.
Meeting Server
risk 0.44cvss 6.8epss 0.02
A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Cisco Meeting Server. The vulnerability is due to insufficient…
CVE-2018-0282MedJan 10, 2019
Cisco Systems, Inc.
Cisco iOS
risk 0.44cvss 6.8epss 0.02
A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state.…
CVE-2018-0381MedOct 17, 2018
Cisco Systems, Inc.
Aironet 1560 Series Access Points
risk 0.44cvss 6.8epss 0.01
A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a deadlock condition that…
CVE-2018-15428MedOct 5, 2018
Cisco Systems, Inc.
iOS Xr Software
risk 0.44cvss 6.8epss 0.02
A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain BGP update…
CVE-2018-15399MedOct 5, 2018
Cisco Systems, Inc.
Adaptive Security Appliance (ASA) Software
risk 0.44cvss 6.8epss 0.02
A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service…
CVE-2018-15397MedOct 5, 2018
Cisco Systems, Inc.
Adaptive Security Appliance (ASA) Software
risk 0.44cvss 6.8epss 0.01
A vulnerability in the implementation of Traffic Flow Confidentiality (TFC) over IPsec functionality in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device…
CVE-2018-15396MedOct 5, 2018
Cisco Systems, Inc.
Unity Connection
risk 0.44cvss 6.8epss 0.02
A vulnerability in the Bulk Administration Tool (BAT) for Cisco Unity Connection could allow an authenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software does not…
CVE-2018-15390MedOct 5, 2018
Cisco Systems, Inc.
Firepower Threat Defense Software
risk 0.44cvss 6.8epss 0.01
A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected…
CVE-2018-15376MedOct 5, 2018
Cisco Systems, Inc.
Cisco IOS XE Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The…
CVE-2018-15375MedOct 5, 2018
Cisco Systems, Inc.
Cisco IOS XE Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The…
CVE-2018-15374MedOct 5, 2018
Cisco Systems, Inc.
iOS Xr Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install a malicious software image or file on an affected device. The vulnerability is due to the affected software improperly verifying digital signatures…
CVE-2018-15371MedOct 5, 2018
Cisco Systems, Inc.
iOS Xr Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has…
CVE-2018-15370MedOct 5, 2018
Cisco Systems, Inc.
Cisco Catalyst 6800 Series Switches
risk 0.44cvss 6.8epss 0.00
A vulnerability in Cisco IOS ROM Monitor (ROMMON) Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due…
CVE-2018-15369MedOct 5, 2018
Cisco Systems, Inc.
Cisco iOS
risk 0.44cvss 6.8epss 0.02
A vulnerability in the TACACS+ client subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling…
CVE-2018-15368MedOct 5, 2018
Cisco Systems, Inc.
iOS Xr Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected…
CVE-2018-0481MedOct 5, 2018
Cisco Systems, Inc.
iOS Xr Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes…
CVE-2018-0477MedOct 5, 2018
Cisco Systems, Inc.
iOS Xr Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes…
CVE-2018-0469MedOct 5, 2018
Cisco Systems, Inc.
iOS Xr Software
risk 0.44cvss 6.8epss 0.03
A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a double-free-in-memory handling by the affected software when specific HTTP requests are…
CVE-2018-0428MedAug 15, 2018
Cisco Systems, Inc.
Web Security Appliance
risk 0.44cvss 6.7epss 0.00
A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to elevate privileges to root. The attacker must authenticate with valid administrator credentials. The vulnerability is due to improper…

Page 43 of 145