Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Digital Network Architecture Center · all components

Priority HIGH 71

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.71767 Published 2018-08-06 Partial fix CWE-400
Priority MEDIUM 57

A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated privileges.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.04919 Published 2018-05-17 No fix listed CWE-358
Priority MEDIUM 55

A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and have direct unauthorized access to critical management functions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03441 Published 2018-10-05 No fix listed CWE-16
Priority MEDIUM 55

A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to log in to an affected system by using an administrative account that has default, static user credenti…

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03542 Published 2018-05-17 No fix listed CWE-798
Priority MEDIUM 54

A vulnerability in the API gateway of the Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and access critical services.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02501 Published 2018-05-17 No fix listed CWE-287
Priority MEDIUM 53

A vulnerability in the identity management service of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and take complete control of identity managem…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02139 Published 2018-10-05 No fix listed CWE-326
Priority MEDIUM 44

A vulnerability in the default configuration of the Cisco Aironet Active Sensor could allow an unauthenticated, remote attacker to restart the sensor.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02589 Published 2019-02-07 Fixed in DNAC1.2.8 CWE-798
Priority MEDIUM 43

A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critical internal services.

CVSS 3.0CRITICAL 9.3 Adjacent network No auth No interaction EPSS 0.00729 Published 2019-06-20 Fixed in 1.3 CWE-668
Priority MEDIUM 40

A vulnerability in the audit logging component of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01047 Published 2020-06-03 No fix listed CWE-532
TI-2018-00228 CVE-2018-0269 · GHSA-66mm-frqr-r7x4

Information disclosure in Cisco DNA Center

Priority LOW 23

A vulnerability in the web framework of the Cisco Digital Network Architecture Center (DNA Center) could allow an unauthenticated, remote attacker to communicate with the Kong API server without restriction.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01265 Published 2018-04-19 No fix listed CWE-200
Open these records in search →