Skip to content
OpenAdvisories

Product · Cisco

Cisco IOS

36 known vulnerabilities.

21 results · Clear filters · Feed

  • Medium 6.8

    Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability

    A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause …

  • Medium 5.5

    Cisco IOx Application Hosting Environment Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

  • Medium 5.5

    Cisco IOx Application Hosting Environment Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

  • Medium 5.5

    Cisco IOx Application Hosting Environment Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

  • Medium 5.5

    Cisco IOx Application Hosting Environment Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

  • Medium 5.5

    Cisco IOx Application Hosting Environment Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

  • Medium 5.5

    Cisco IOx Application Hosting Environment Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

  • Medium 5.5

    Cisco IOx Application Hosting Environment Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

  • Medium 5.5

    Cisco IOx Application Hosting Environment Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

  • Medium 5.5

    Cisco IOx Application Hosting Environment Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

  • Medium 5.5

    Cisco IOx Application Hosting Environment Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

  • Medium 5.5

    Cisco IOx Application Hosting Environment Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

  • Medium 5.3

    Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass Vulnerability

    A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured destination patterns and dial arbitrary numbers. This vulnerability is …

  • Medium 6.8

    Cisco IOS and IOS XE Software Link Layer Discovery Protocol Denial of Service Vulnerability

    A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability …

  • Medium 5.8

    Cisco IOS and IOS XE Software ARP Resource Management Exhaustion Denial of Service Vulnerability

    A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent an affected device from resolving ARP entries for legitimate hosts on the connected subn…

  • Medium 6.5

    Cisco IOx Application Environment Path Traversal Vulnerability

    A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks and read and write files on the underlying operating system or host system. This …

  • Medium 5.1

    Cisco IOS and IOS XE Software Privilege Escalation Vulnerability

    A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the presence of development testing and verification scripts tha…

  • Medium 5.3

    Cisco IOx Application Framework Denial of Service Vulnerability

    A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers (Industrial ISRs), Cisco 829 Industrial ISRs, Cisco CGR 1000 Compute Module, and Cisco IC3000 Industrial Compute Gateway could allow an unauthenticated,…

  • Medium 5.5

    Cisco IOS and IOS XE Software Information Disclosure Vulnerability

    A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the executio…

  • Medium 5.3

    Cisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability

    A vulnerability in the access control logic of the Secure Shell (SSH) server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding (VRF) instance despite the absence of the vrf-also keyword in the access-class co…

  • Medium 6.8

    Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability

    A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control …