Cisco

Ios Xe

554 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2015-4293

  • EPSS 0.47%
  • Published 30.07.2015 14:59:00
  • Last modified 12.04.2025 10:46:40

The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1) IPv4 or (2) IPv6 packets that trigger ATTN-3-SYNC_TIMEOUT errors after rea...

7.1

CVE-2015-0681

  • EPSS 0.56%
  • Published 24.07.2015 16:59:00
  • Last modified 12.04.2025 10:46:40

The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG...

6.1

CVE-2015-4243

  • EPSS 0.26%
  • Published 08.07.2015 14:59:03
  • Last modified 12.04.2025 10:46:40

The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service (device reload) by sending malformed PPPoE Active Discovery Request (PADR) packets on the local network, aka Bug ID...

6.1

CVE-2015-0710

  • EPSS 0.18%
  • Published 29.04.2015 01:59:02
  • Last modified 12.04.2025 10:46:40

The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service (device reload) via a series of packets that are considered oversized and trigger improper fragmentation handling, ak...

6.8

CVE-2015-0709

  • EPSS 0.36%
  • Published 29.04.2015 01:59:01
  • Last modified 12.04.2025 10:46:40

Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device crash) by leveraging knowledge of the RADIUS secret and sending crafted RADIUS packets, aka Bug ID CSCur21348.

6.1

CVE-2015-0708

  • EPSS 0.18%
  • Published 29.04.2015 01:59:00
  • Last modified 12.04.2025 10:46:40

Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956.

7.1

CVE-2015-0688

  • EPSS 0.4%
  • Published 04.04.2015 01:59:02
  • Last modified 12.04.2025 10:46:40

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a denial of service (module crash) via malformed H.323 packets, aka Bug ID CSCup21070.

7.8

CVE-2015-0685

  • EPSS 0.43%
  • Published 03.04.2015 02:00:24
  • Last modified 12.04.2025 10:46:40

Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service (device hang) via crafted IP packets, aka Bug ID CSCub31873.

7.8

CVE-2015-0650

  • EPSS 1.1%
  • Published 26.03.2015 10:59:14
  • Last modified 12.04.2025 10:46:40

The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S, 3.12.xS before 3.12.2S, and 3.13.xS before 3.13.1S allows remote attacker...

7.8

CVE-2015-0646

  • EPSS 1.55%
  • Published 26.03.2015 10:59:11
  • Last modified 12.04.2025 10:46:40

Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of ser...