Cisco

Ios Xe

550 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2014-2113

  • EPSS 1.1%
  • Veröffentlicht 27.03.2014 21:55:09
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service (I/O memory consumption and device reload) via a malformed IPv6 packet, aka...

7.8

CVE-2014-2106

  • EPSS 1.7%
  • Veröffentlicht 27.03.2014 21:55:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cisco IOS 15.3M before 15.3(3)M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID CSCug45898.

5.4

CVE-2013-6981

  • EPSS 2.02%
  • Veröffentlicht 28.12.2013 04:53:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fragmented MPLS IP packets, aka Bug ID CSCul00709.

5.4

CVE-2013-6979

  • EPSS 0.33%
  • Veröffentlicht 23.12.2013 22:55:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP...

7.1

CVE-2013-6704

  • EPSS 0.51%
  • Veröffentlicht 03.12.2013 19:56:32
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service (memory consumption) via TFTP (1) client or (2) server traffic, aka Bug IDs CSCuh09324 and CSCty42686.

6.1

CVE-2013-6705

  • EPSS 0.35%
  • Veröffentlicht 03.12.2013 19:56:32
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The IP Device Tracking (IPDT) feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (IPDT AVL corruption and device reload) via a crafted sequence of ARP packets, aka Bug ID CSCuh38133.

5.4

CVE-2013-6706

  • EPSS 1.75%
  • Veröffentlicht 29.11.2013 04:33:29
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service (device reload) via crafted MPLS packets that are not properly handled during IP header validation, aka Bug ID CSCuj23992.

6.3

CVE-2013-6692

  • EPSS 0.3%
  • Veröffentlicht 22.11.2013 01:55:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service (device reload) via an AAA packet that triggers an address requirement, aka B...

7.8

CVE-2013-5543

  • EPSS 0.43%
  • Veröffentlicht 31.10.2013 21:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via malformed ICMP error packets associated with a (1) TCP or (2) UDP session that is under inspection by th...

7.8

CVE-2013-5545

  • EPSS 0.43%
  • Veröffentlicht 31.10.2013 21:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending many PPTP packets over NAT, aka Bug ID CSCuh19936.