Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,059 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-1720	Cisco Systems, Inc. Telepresence Video Communication Server	Med	0.44	6.8	0.02	Apr 18, 2019	A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service (DoS) condition on an affected system.…
CVE-2018-0248	Cisco Systems, Inc. Wireless Lan Controller Software	Med	0.44	6.8	0.02	Apr 17, 2019	A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is using this GUI, causing…
CVE-2019-1760	Cisco Systems, Inc. iOS Xe	Med	0.44	6.8	0.02	Mar 28, 2019	A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this…
CVE-2019-1615	Cisco Systems, Inc. Nexus 9000 Series Fabric Switches in ACI mode	Med	0.44	6.7	0.00	Mar 11, 2019	A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability is due to improper verification of…
CVE-2019-1613	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Mar 11, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1611	Cisco Systems, Inc. Fxos	Med	0.44	6.7	0.00	Mar 11, 2019	A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed…
CVE-2019-1610	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Mar 11, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1609	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.01	Mar 8, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1608	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Mar 8, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1607	Cisco Systems, Inc. NX-OS Software	Med	0.44	6.7	0.00	Mar 8, 2019	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1585	Cisco Systems, Inc. Nexus 9000 Series ACI Mode Switch Software	Med	0.44	6.7	0.00	Mar 6, 2019	A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of…
CVE-2019-1676	Cisco Systems, Inc. Meeting Server	Med	0.44	6.8	0.02	Feb 8, 2019	A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Cisco Meeting Server. The vulnerability is due to insufficient…
CVE-2018-0282	Cisco Systems, Inc. Cisco iOS	Med	0.44	6.8	0.02	Jan 10, 2019	A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state.…
CVE-2018-0381	Cisco Systems, Inc. Aironet Access Points	Med	0.44	6.8	0.01	Oct 17, 2018	A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a deadlock condition that…
CVE-2018-15428	Cisco Systems, Inc. iOS Xr	Med	0.44	6.8	0.02	Oct 5, 2018	A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain BGP update…
CVE-2018-15399	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.44	6.8	0.02	Oct 5, 2018	A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service…
CVE-2018-15397	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.44	6.8	0.01	Oct 5, 2018	A vulnerability in the implementation of Traffic Flow Confidentiality (TFC) over IPsec functionality in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device…
CVE-2018-15396	Cisco Systems, Inc. Unity Connection	Med	0.44	6.8	0.02	Oct 5, 2018	A vulnerability in the Bulk Administration Tool (BAT) for Cisco Unity Connection could allow an authenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software does not…
CVE-2018-15390	Cisco Systems, Inc. FTD	Med	0.44	6.8	0.01	Oct 5, 2018	A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected…
CVE-2018-15376	Cisco Systems, Inc. Cisco iOS	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The…
CVE-2018-15375	Cisco Systems, Inc. Cisco iOS	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The…
CVE-2018-15374	Cisco Systems, Inc. iOS Xe	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install a malicious software image or file on an affected device. The vulnerability is due to the affected software improperly verifying digital signatures…
CVE-2018-15371	Cisco Systems, Inc. iOS Xe	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has…
CVE-2018-15370	Cisco Systems, Inc. Ios Rom Monitor	Med	0.44	6.8	0.00	Oct 5, 2018	A vulnerability in Cisco IOS ROM Monitor (ROMMON) Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due…
CVE-2018-15369	Cisco Systems, Inc. Cisco iOS	Med	0.44	6.8	0.02	Oct 5, 2018	A vulnerability in the TACACS+ client subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling…
CVE-2018-15368	Cisco Systems, Inc. iOS Xe	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected…
CVE-2018-0481	Cisco Systems, Inc. iOS Xe	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes…
CVE-2018-0477	Cisco Systems, Inc. iOS Xe	Med	0.44	6.7	0.00	Oct 5, 2018	A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes…
CVE-2018-0469	Cisco Systems, Inc. iOS Xe	Med	0.44	6.8	0.03	Oct 5, 2018	A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a double-free-in-memory handling by the affected software when specific HTTP requests are…
CVE-2018-0428	Cisco Systems, Inc. Web Security Appliance	Med	0.44	6.7	0.00	Aug 15, 2018	A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to elevate privileges to root. The attacker must authenticate with valid administrator credentials. The vulnerability is due to improper…
CVE-2018-0415	Cisco Systems, Inc. Small Business 100 Series Wireless Access Points	Med	0.44	6.8	0.01	Aug 15, 2018	A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an authenticated, adjacent attacker to…
CVE-2018-0342	Cisco Systems, Inc. Vbond Orchestrator	Med	0.44	6.7	0.00	Jul 18, 2018	A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to…
CVE-2018-0294	Cisco Systems, Inc. Fxos	Med	0.44	6.7	0.00	Jun 20, 2018	A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affected device. The vulnerability exists because the affected software does not…
CVE-2018-0352	Cisco Systems, Inc. Wide Area Application Services	Med	0.44	6.7	0.00	Jun 7, 2018	A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their privilege level to root. The attacker must have valid user credentials with super user privileges (level…
CVE-2018-0324	Cisco Systems, Inc. Enterprise NFV Infrastructure Software (NFVIS)	Med	0.44	6.7	0.01	May 17, 2018	A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, high-privileged, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters in the CLI…
CVE-2018-0275	Cisco Systems, Inc. Identity Services Engine Software	Med	0.44	6.7	0.00	Apr 19, 2018	A vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to access the device's shell. The vulnerability is due to improper configuration of the support tunnel feature. An attacker could exploit this…
CVE-2018-0184	Cisco Systems, Inc. iOS Xe	Med	0.44	6.7	0.00	Mar 28, 2018	A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected…
CVE-2018-0183	Cisco Systems, Inc. iOS Xe	Med	0.44	6.7	0.00	Mar 28, 2018	A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected…
CVE-2018-0224	Cisco Systems, Inc. Staros	Med	0.44	6.7	0.00	Mar 8, 2018	A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to execute arbitrary commands with root privileges on an affected operating system. The vulnerability is due to…
CVE-2018-0221	Cisco Systems, Inc. Identity Services Engine Software	Med	0.44	6.7	0.01	Mar 8, 2018	A vulnerability in specific CLI commands for the Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection to the underlying operating system or cause a hang or disconnect of the user session. The attacker needs valid…
CVE-2018-0217	Cisco Systems, Inc. Staros	Med	0.44	6.7	0.01	Mar 8, 2018	A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to perform a command injection attack on an affected system. The vulnerability is due to insufficient validation of…
CVE-2018-0115	Cisco Systems, Inc. Staros	Med	0.44	6.7	0.00	Jan 18, 2018	A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authenticated, local attacker to execute arbitrary commands with root privileges on an affected host operating system. The vulnerability is due to insufficient…
CVE-2018-0088	Cisco Systems, Inc. Industrial Ethernet 4010 Series Firmware	Med	0.44	6.7	0.00	Jan 18, 2018	A vulnerability in one of the diagnostic test CLI commands on Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software could allow an authenticated, local attacker to impact the stability of the device. This could result in arbitrary code execution or a denial…
CVE-2017-12352	Cisco Systems, Inc. Application Policy Infrastructure Controller	Med	0.44	6.7	0.00	Nov 30, 2017	A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host…
CVE-2017-12342	Cisco Systems, Inc. Nexus Series Switches	Med	0.44	6.8	0.00	Nov 30, 2017	A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches could allow an unauthenticated, local attacker to read and send packets outside the scope of the OAC. The vulnerability is due to insufficient internal security measures in the OAC feature.…
CVE-2017-12341	Cisco Systems, Inc. Unified Computing System	Med	0.44	6.7	0.01	Nov 30, 2017	A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. An attacker would need valid administrator credentials to perform this exploit. The vulnerability is due to insufficient input validation…
CVE-2017-12334	Cisco Systems, Inc. Unified Computing System	Med	0.44	6.7	0.01	Nov 30, 2017	A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. An attacker would need valid administrator credentials to perform this exploit. The vulnerability is due to insufficient input validation…
CVE-2017-12333	Cisco Systems, Inc. Unified Computing System	Med	0.44	6.7	0.00	Nov 30, 2017	A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software image. The vulnerability is due to insufficient NX-OS signature verification for software images. An authenticated, local attacker…
CVE-2017-12331	Cisco Systems, Inc. Unified Computing System	Med	0.44	6.7	0.00	Nov 30, 2017	A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software patch. The vulnerability is due to insufficient NX-OS signature verification for software patches. An authenticated, local…
CVE-2017-12313	Cisco Systems, Inc. Packet Tracer	Med	0.44	6.7	0.01	Nov 16, 2017	An untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet Tracer software could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the…

CVE-2019-1720MedApr 18, 2019
Cisco Systems, Inc.
Telepresence Video Communication Server
risk 0.44cvss 6.8epss 0.02
A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service (DoS) condition on an affected system.…
CVE-2018-0248MedApr 17, 2019
Cisco Systems, Inc.
Wireless Lan Controller Software
risk 0.44cvss 6.8epss 0.02
A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is using this GUI, causing…
CVE-2019-1760MedMar 28, 2019
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.8epss 0.02
A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this…
CVE-2019-1615MedMar 11, 2019
Cisco Systems, Inc.
Nexus 9000 Series Fabric Switches in ACI mode
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability is due to improper verification of…
CVE-2019-1613MedMar 11, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1611MedMar 11, 2019
Cisco Systems, Inc.
Fxos
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed…
CVE-2019-1610MedMar 11, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1609MedMar 8, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.01
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1608MedMar 8, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1607MedMar 8, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI…
CVE-2019-1585MedMar 6, 2019
Cisco Systems, Inc.
Nexus 9000 Series ACI Mode Switch Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of…
CVE-2019-1676MedFeb 8, 2019
Cisco Systems, Inc.
Meeting Server
risk 0.44cvss 6.8epss 0.02
A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Cisco Meeting Server. The vulnerability is due to insufficient…
CVE-2018-0282MedJan 10, 2019
Cisco Systems, Inc.
Cisco iOS
risk 0.44cvss 6.8epss 0.02
A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state.…
CVE-2018-0381MedOct 17, 2018
Cisco Systems, Inc.
Aironet Access Points
risk 0.44cvss 6.8epss 0.01
A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a deadlock condition that…
CVE-2018-15428MedOct 5, 2018
Cisco Systems, Inc.
iOS Xr
risk 0.44cvss 6.8epss 0.02
A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain BGP update…
CVE-2018-15399MedOct 5, 2018
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.44cvss 6.8epss 0.02
A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service…
CVE-2018-15397MedOct 5, 2018
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.44cvss 6.8epss 0.01
A vulnerability in the implementation of Traffic Flow Confidentiality (TFC) over IPsec functionality in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device…
CVE-2018-15396MedOct 5, 2018
Cisco Systems, Inc.
Unity Connection
risk 0.44cvss 6.8epss 0.02
A vulnerability in the Bulk Administration Tool (BAT) for Cisco Unity Connection could allow an authenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software does not…
CVE-2018-15390MedOct 5, 2018
Cisco Systems, Inc.
FTD
risk 0.44cvss 6.8epss 0.01
A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected…
CVE-2018-15376MedOct 5, 2018
Cisco Systems, Inc.
Cisco iOS
risk 0.44cvss 6.7epss 0.00
A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The…
CVE-2018-15375MedOct 5, 2018
Cisco Systems, Inc.
Cisco iOS
risk 0.44cvss 6.7epss 0.00
A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values to arbitrary locations in the memory space of an affected device. The…
CVE-2018-15374MedOct 5, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install a malicious software image or file on an affected device. The vulnerability is due to the affected software improperly verifying digital signatures…
CVE-2018-15371MedOct 5, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.7epss 0.00
A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has…
CVE-2018-15370MedOct 5, 2018
Cisco Systems, Inc.
Ios Rom Monitor
risk 0.44cvss 6.8epss 0.00
A vulnerability in Cisco IOS ROM Monitor (ROMMON) Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due…
CVE-2018-15369MedOct 5, 2018
Cisco Systems, Inc.
Cisco iOS
risk 0.44cvss 6.8epss 0.02
A vulnerability in the TACACS+ client subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling…
CVE-2018-15368MedOct 5, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected…
CVE-2018-0481MedOct 5, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes…
CVE-2018-0477MedOct 5, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes…
CVE-2018-0469MedOct 5, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.8epss 0.03
A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a double-free-in-memory handling by the affected software when specific HTTP requests are…
CVE-2018-0428MedAug 15, 2018
Cisco Systems, Inc.
Web Security Appliance
risk 0.44cvss 6.7epss 0.00
A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to elevate privileges to root. The attacker must authenticate with valid administrator credentials. The vulnerability is due to improper…
CVE-2018-0415MedAug 15, 2018
Cisco Systems, Inc.
Small Business 100 Series Wireless Access Points
risk 0.44cvss 6.8epss 0.01
A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Series Wireless Access Points could allow an authenticated, adjacent attacker to…
CVE-2018-0342MedJul 18, 2018
Cisco Systems, Inc.
Vbond Orchestrator
risk 0.44cvss 6.7epss 0.00
A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to…
CVE-2018-0294MedJun 20, 2018
Cisco Systems, Inc.
Fxos
risk 0.44cvss 6.7epss 0.00
A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affected device. The vulnerability exists because the affected software does not…
CVE-2018-0352MedJun 7, 2018
Cisco Systems, Inc.
Wide Area Application Services
risk 0.44cvss 6.7epss 0.00
A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their privilege level to root. The attacker must have valid user credentials with super user privileges (level…
CVE-2018-0324MedMay 17, 2018
Cisco Systems, Inc.
Enterprise NFV Infrastructure Software (NFVIS)
risk 0.44cvss 6.7epss 0.01
A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, high-privileged, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters in the CLI…
CVE-2018-0275MedApr 19, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.44cvss 6.7epss 0.00
A vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to access the device's shell. The vulnerability is due to improper configuration of the support tunnel feature. An attacker could exploit this…
CVE-2018-0184MedMar 28, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected…
CVE-2018-0183MedMar 28, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected…
CVE-2018-0224MedMar 8, 2018
Cisco Systems, Inc.
Staros
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to execute arbitrary commands with root privileges on an affected operating system. The vulnerability is due to…
CVE-2018-0221MedMar 8, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.44cvss 6.7epss 0.01
A vulnerability in specific CLI commands for the Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection to the underlying operating system or cause a hang or disconnect of the user session. The attacker needs valid…
CVE-2018-0217MedMar 8, 2018
Cisco Systems, Inc.
Staros
risk 0.44cvss 6.7epss 0.01
A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to perform a command injection attack on an affected system. The vulnerability is due to insufficient validation of…
CVE-2018-0115MedJan 18, 2018
Cisco Systems, Inc.
Staros
risk 0.44cvss 6.7epss 0.00
A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authenticated, local attacker to execute arbitrary commands with root privileges on an affected host operating system. The vulnerability is due to insufficient…
CVE-2018-0088MedJan 18, 2018
Cisco Systems, Inc.
Industrial Ethernet 4010 Series Firmware
risk 0.44cvss 6.7epss 0.00
A vulnerability in one of the diagnostic test CLI commands on Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software could allow an authenticated, local attacker to impact the stability of the device. This could result in arbitrary code execution or a denial…
CVE-2017-12352MedNov 30, 2017
Cisco Systems, Inc.
Application Policy Infrastructure Controller
risk 0.44cvss 6.7epss 0.00
A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host…
CVE-2017-12342MedNov 30, 2017
Cisco Systems, Inc.
Nexus Series Switches
risk 0.44cvss 6.8epss 0.00
A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches could allow an unauthenticated, local attacker to read and send packets outside the scope of the OAC. The vulnerability is due to insufficient internal security measures in the OAC feature.…
CVE-2017-12341MedNov 30, 2017
Cisco Systems, Inc.
Unified Computing System
risk 0.44cvss 6.7epss 0.01
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. An attacker would need valid administrator credentials to perform this exploit. The vulnerability is due to insufficient input validation…
CVE-2017-12334MedNov 30, 2017
Cisco Systems, Inc.
Unified Computing System
risk 0.44cvss 6.7epss 0.01
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. An attacker would need valid administrator credentials to perform this exploit. The vulnerability is due to insufficient input validation…
CVE-2017-12333MedNov 30, 2017
Cisco Systems, Inc.
Unified Computing System
risk 0.44cvss 6.7epss 0.00
A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software image. The vulnerability is due to insufficient NX-OS signature verification for software images. An authenticated, local attacker…
CVE-2017-12331MedNov 30, 2017
Cisco Systems, Inc.
Unified Computing System
risk 0.44cvss 6.7epss 0.00
A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software patch. The vulnerability is due to insufficient NX-OS signature verification for software patches. An authenticated, local…
CVE-2017-12313MedNov 16, 2017
Cisco Systems, Inc.
Packet Tracer
risk 0.44cvss 6.7epss 0.01
An untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet Tracer software could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the…

Page 47 of 142