Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-1813	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital…
CVE-2019-1812	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital…
CVE-2019-1811	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital…
CVE-2019-1810	Cisco Systems, Inc. Nx OS	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the Image Signature Verification feature used in an NX-OS CLI command in Cisco Nexus 3000 Series and 9000 Series Switches could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected…
CVE-2019-1809	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of…
CVE-2019-1795	Cisco Systems, Inc. Fxos	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of…
CVE-2019-1791	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.01	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to…
CVE-2019-1790	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with valid administrator credentials to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of…
CVE-2019-1784	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a…
CVE-2019-1783	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient…
CVE-2019-1782	Cisco Systems, Inc. Fxos	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments…
CVE-2019-1781	Cisco Systems, Inc. Fxos	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments…
CVE-2019-1779	Cisco Systems, Inc. FXOS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device with elevated privileges. The vulnerability is due to insufficient…
CVE-2019-1778	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a…
CVE-2019-1776	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a…
CVE-2019-1775	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1774	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1770	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient…
CVE-2019-1769	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system of an attached line card with the privilege level of root. The vulnerability is…
CVE-2019-1767	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.01	May 15, 2019	A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute…
CVE-2019-1730	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands at the privilege level of a network-admin user outside of the Guest Shell.…
CVE-2019-1728	Cisco Systems, Inc. FXOS Software	Med	0.44	6.7	0.00	May 15, 2019	A vulnerability in the Secure Configuration Validation functionality of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to run arbitrary commands at system boot time with the privileges of root. The vulnerability is due to a lack of…
CVE-2019-1727	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.01	May 15, 2019	A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of…
CVE-2019-1649	Cisco Systems, Inc. Secure Boot	Med	0.44	6.7	0.01	May 13, 2019	A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability affects multiple…
CVE-2019-1803	Cisco Systems, Inc. Nexus 9000 Series Application Centric Infrastructure	Med	0.44	6.7	0.00	May 3, 2019	A vulnerability in the filesystem management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an authenticated, local attacker with administrator rights to gain elevated privileges as the root user on an affected device.…
CVE-2019-1699	Cisco Systems, Inc. Secure Firewall Management Center	Med	0.44	6.7	0.01	May 3, 2019	A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting…
CVE-2019-1697	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.44	6.8	0.02	May 3, 2019	A vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to…
CVE-2019-1829	Cisco Systems, Inc. Aironet Access Point Software	Med	0.44	6.7	0.00	Apr 18, 2019	A vulnerability in the CLI of Cisco Aironet Series Access Points (APs) could allow an authenticated, local attacker to gain access to the underlying Linux operating system (OS) without the proper authentication. The attacker would need valid administrator device credentials. The…
CVE-2019-1826	Cisco Systems, Inc. Aironet Access Point Software	Med	0.44	6.8	0.01	Apr 18, 2019	A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation on QoS…
CVE-2019-1720	Cisco Systems, Inc. Telepresence Video Communication Server	Med	0.44	6.8	0.02	Apr 18, 2019	A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service (DoS) condition on an affected system.…
CVE-2018-0248	Cisco Systems, Inc. Wireless Lan Controller Software	Med	0.44	6.8	0.02	Apr 17, 2019	A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is using this GUI, causing…
CVE-2019-1760	Cisco Systems, Inc. iOS Xe	Med	0.44	6.8	0.02	Mar 28, 2019	A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this…
CVE-2019-1615	Cisco Systems, Inc. Nexus 9000 Series Fabric Switches in ACI mode	Med	0.44	6.7	0.00	Mar 11, 2019	A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability is due to improper verification of…
CVE-2019-1613	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Mar 11, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1611	Cisco Systems, Inc. Fxos	Med	0.44	6.7	0.00	Mar 11, 2019	A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed…
CVE-2019-1610	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Mar 11, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1609	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.01	Mar 8, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1608	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Mar 8, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1607	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Mar 8, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1585	Cisco Systems, Inc. Nexus 9000 Series ACI Mode Switch Software	Med	0.44	6.7	0.00	Mar 6, 2019	A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of…
CVE-2019-1676	Cisco Systems, Inc. Meeting Server	Med	0.44	6.8	0.02	Feb 8, 2019	A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Cisco Meeting Server. The vulnerability is due to insufficient…
CVE-2018-0282	Cisco Systems, Inc. Cisco iOS	Med	0.44	6.8	0.02	Jan 10, 2019	A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state.…
CVE-2018-0381	Cisco Systems, Inc. Aironet Access Points	Med	0.44	6.8	0.01	Oct 17, 2018	A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a deadlock condition that…
CVE-2018-15428	Cisco Systems, Inc. iOS Xr	Med	0.44	6.8	0.02	Oct 5, 2018	A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain BGP update…
CVE-2018-15399	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.44	6.8	0.02	Oct 5, 2018	A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service…
CVE-2018-15397	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.44	6.8	0.01	Oct 5, 2018	A vulnerability in the implementation of Traffic Flow Confidentiality (TFC) over IPsec functionality in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device…
CVE-2018-15396	Cisco Systems, Inc. Unity Connection	Med	0.44	6.8	0.02	Oct 5, 2018	A vulnerability in the Bulk Administration Tool (BAT) for Cisco Unity Connection could allow an authenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software does not…
CVE-2018-15390	Cisco Systems, Inc. FTD	Med	0.44	6.8	0.01	Oct 5, 2018	A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected…
CVE-2018-15376	Cisco Systems, Inc. Cisco iOS	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The…
CVE-2018-15375	Cisco Systems, Inc. Cisco iOS	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The…

CVE-2019-1813MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital…
CVE-2019-1812MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital…
CVE-2019-1811MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital…
CVE-2019-1810MedMay 15, 2019
Cisco Systems, Inc.
Nx OS
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Image Signature Verification feature used in an NX-OS CLI command in Cisco Nexus 3000 Series and 9000 Series Switches could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected…
CVE-2019-1809MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of…
CVE-2019-1795MedMay 15, 2019
Cisco Systems, Inc.
Fxos
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of…
CVE-2019-1791MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.01
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to…
CVE-2019-1790MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with valid administrator credentials to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of…
CVE-2019-1784MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a…
CVE-2019-1783MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient…
CVE-2019-1782MedMay 15, 2019
Cisco Systems, Inc.
Fxos
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments…
CVE-2019-1781MedMay 15, 2019
Cisco Systems, Inc.
Fxos
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments…
CVE-2019-1779MedMay 15, 2019
Cisco Systems, Inc.
FXOS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device with elevated privileges. The vulnerability is due to insufficient…
CVE-2019-1778MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a…
CVE-2019-1776MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a…
CVE-2019-1775MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1774MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1770MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient…
CVE-2019-1769MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system of an attached line card with the privilege level of root. The vulnerability is…
CVE-2019-1767MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.01
A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute…
CVE-2019-1730MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands at the privilege level of a network-admin user outside of the Guest Shell.…
CVE-2019-1728MedMay 15, 2019
Cisco Systems, Inc.
FXOS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Secure Configuration Validation functionality of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to run arbitrary commands at system boot time with the privileges of root. The vulnerability is due to a lack of…
CVE-2019-1727MedMay 15, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.01
A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of…
CVE-2019-1649MedMay 13, 2019
Cisco Systems, Inc.
Secure Boot
risk 0.44cvss 6.7epss 0.01
A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability affects multiple…
CVE-2019-1803MedMay 3, 2019
Cisco Systems, Inc.
Nexus 9000 Series Application Centric Infrastructure
risk 0.44cvss 6.7epss 0.00
A vulnerability in the filesystem management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an authenticated, local attacker with administrator rights to gain elevated privileges as the root user on an affected device.…
CVE-2019-1699MedMay 3, 2019
Cisco Systems, Inc.
Secure Firewall Management Center
risk 0.44cvss 6.7epss 0.01
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting…
CVE-2019-1697MedMay 3, 2019
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.44cvss 6.8epss 0.02
A vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to…
CVE-2019-1829MedApr 18, 2019
Cisco Systems, Inc.
Aironet Access Point Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco Aironet Series Access Points (APs) could allow an authenticated, local attacker to gain access to the underlying Linux operating system (OS) without the proper authentication. The attacker would need valid administrator device credentials. The…
CVE-2019-1826MedApr 18, 2019
Cisco Systems, Inc.
Aironet Access Point Software
risk 0.44cvss 6.8epss 0.01
A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation on QoS…
CVE-2019-1720MedApr 18, 2019
Cisco Systems, Inc.
Telepresence Video Communication Server
risk 0.44cvss 6.8epss 0.02
A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service (DoS) condition on an affected system.…
CVE-2018-0248MedApr 17, 2019
Cisco Systems, Inc.
Wireless Lan Controller Software
risk 0.44cvss 6.8epss 0.02
A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is using this GUI, causing…
CVE-2019-1760MedMar 28, 2019
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.8epss 0.02
A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this…
CVE-2019-1615MedMar 11, 2019
Cisco Systems, Inc.
Nexus 9000 Series Fabric Switches in ACI mode
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability is due to improper verification of…
CVE-2019-1613MedMar 11, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1611MedMar 11, 2019
Cisco Systems, Inc.
Fxos
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed…
CVE-2019-1610MedMar 11, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1609MedMar 8, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.01
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1608MedMar 8, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1607MedMar 8, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1585MedMar 6, 2019
Cisco Systems, Inc.
Nexus 9000 Series ACI Mode Switch Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of…
CVE-2019-1676MedFeb 8, 2019
Cisco Systems, Inc.
Meeting Server
risk 0.44cvss 6.8epss 0.02
A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Cisco Meeting Server. The vulnerability is due to insufficient…
CVE-2018-0282MedJan 10, 2019
Cisco Systems, Inc.
Cisco iOS
risk 0.44cvss 6.8epss 0.02
A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state.…
CVE-2018-0381MedOct 17, 2018
Cisco Systems, Inc.
Aironet Access Points
risk 0.44cvss 6.8epss 0.01
A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a deadlock condition that…
CVE-2018-15428MedOct 5, 2018
Cisco Systems, Inc.
iOS Xr
risk 0.44cvss 6.8epss 0.02
A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain BGP update…
CVE-2018-15399MedOct 5, 2018
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.44cvss 6.8epss 0.02
A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service…
CVE-2018-15397MedOct 5, 2018
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.44cvss 6.8epss 0.01
A vulnerability in the implementation of Traffic Flow Confidentiality (TFC) over IPsec functionality in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device…
CVE-2018-15396MedOct 5, 2018
Cisco Systems, Inc.
Unity Connection
risk 0.44cvss 6.8epss 0.02
A vulnerability in the Bulk Administration Tool (BAT) for Cisco Unity Connection could allow an authenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software does not…
CVE-2018-15390MedOct 5, 2018
Cisco Systems, Inc.
FTD
risk 0.44cvss 6.8epss 0.01
A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected…
CVE-2018-15376MedOct 5, 2018
Cisco Systems, Inc.
Cisco iOS
risk 0.44cvss 6.7epss 0.00
A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The…
CVE-2018-15375MedOct 5, 2018
Cisco Systems, Inc.
Cisco iOS
risk 0.44cvss 6.7epss 0.00
A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The…

Page 45 of 140