Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Cisco IOS XE Software n/a Clear all filters
TI-2019-09460 CVE-2019-12664 · GHSA-qf56-4c48-p66f

Cisco IOS XE Software ISDN Data Leak Vulnerability

Priority LOW 36

A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers (ISRs) could allow an unauthenticated, adjacent attacker to pass IPv4 traffi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01425 Published 2019-09-25 No fix listed CWE-200
TI-2019-09459 CVE-2019-12663 · GHSA-6jpf-pwf8-qj8x

Cisco IOS XE Software TrustSec Protected Access Credential Provisioning Denial of Service Vulnerability

Priority MEDIUM 41

A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resultin…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01777 Published 2019-09-25 No fix listed CWE-20
TI-2019-09457 CVE-2019-12661 · GHSA-8xwh-p7g5-63f6

Cisco IOS XE Software Virtualization Manager CLI Command Injection Vulnerability

Priority LOW 32

A vulnerability in a Virtualization Manager (VMAN) related CLI command of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a p…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00449 Published 2019-09-25 No fix listed CWE-77
TI-2019-09449 CVE-2019-12653 · GHSA-p8wr-6h8h-gjc7

Cisco IOS XE Software Raw Socket Transport Denial of Service Vulnerability

Priority MEDIUM 43

A vulnerability in the Raw Socket Transport feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01984 Published 2019-09-25 No fix listed CWE-20