Cisco

Ios

516 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2012-1367

Exploit
  • EPSS 0.48%
  • Published 06.08.2012 15:55:01
  • Last modified 11.04.2025 00:51:21

The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (Route Processor crash) via a BGP UPDATE message with a modified local-preference (aka LOCAL_PREF) attribute length, aka ...

7.1

CVE-2012-1324

  • EPSS 0.31%
  • Published 03.05.2012 20:55:03
  • Last modified 11.04.2025 00:51:21

Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, allows remote attackers to cause a denial of service (device crash) by sending IPv6 packets, aka Bug ID CSCtk53534.

6.1

CVE-2012-1327

  • EPSS 0.17%
  • Published 03.05.2012 20:55:03
  • Last modified 11.04.2025 00:51:21

dot11t/t_if_dot11_hal_ath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (assertion failure and reboot) via 802.11 wireless traffic, as demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S, a...

5.4

CVE-2011-4019

  • EPSS 0.43%
  • Published 03.05.2012 10:11:39
  • Last modified 11.04.2025 00:51:21

Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager (CUCM) 7.x, allows remote attackers to cause a denial of service (memory consumption) via a crafted response to a SIP SUBSCRIBE message, aka Bug IDs CSCto93...

6.3

CVE-2011-4231

  • EPSS 0.3%
  • Published 03.05.2012 10:11:39
  • Last modified 11.04.2025 00:51:21

Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service (segmentation fault and device crash) via unspecified vectors, aka Bug ID CSCtq6112...

5

CVE-2012-0338

  • EPSS 0.27%
  • Published 02.05.2012 10:09:22
  • Last modified 11.04.2025 00:51:21

Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH connections from arbitrary source IP addresses via a standard SSH client, aka Bug...

5

CVE-2012-0339

  • EPSS 0.24%
  • Published 02.05.2012 10:09:22
  • Last modified 11.04.2025 00:51:21

Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary source IP addresses via a standard TELNET client, a...

7.8

CVE-2011-2578

  • EPSS 0.6%
  • Published 02.05.2012 10:09:21
  • Last modified 11.04.2025 00:51:21

Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption) via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366.

5.4

CVE-2011-2586

  • EPSS 0.43%
  • Published 02.05.2012 10:09:21
  • Last modified 11.04.2025 00:51:21

The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service (device crash) via a malformed HTTP response to a request for service installation, aka Bug ID CSCts12249.

3.6

CVE-2011-3289

  • EPSS 0.07%
  • Published 02.05.2012 10:09:21
  • Last modified 11.04.2025 00:51:21

Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640.