CVE Vulnerability Catalog

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This is due to insufficient validation of user arguments passed to specific CLI commands. An attacker could log in with level 15 credentials and use crafted commands.

Podatność w interfejsie webowym oprogramowania Cisco IOS może pozwolić uwierzytelnionemu, zdalnemu atakującemu o niskich uprawnieniach na spowodowanie stanu odmowy usługi (DoS) na podatnym urządzeniu. Problem wynika z niewłaściwej walidacji danych wejściowych.

A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL on an affected device. This vulnerability is due to the flooding of traffic from an unlearned MAC address on a switch virtual interface (SVI) that has an egress ACL applied. An attacker could exploit this vulnerability by causing the VLAN to flush its MAC address table. This condition can also occur if the MAC address table is full. A successful exploit could allow the attacker to bypass an egress ACL on an affected device.

Podatność w funkcji Network-Based Application Recognition (NBAR) oprogramowania Cisco IOS XE może pozwolić nieautoryzowanemu, zdalnemu atakującemu na spowodowanie ponownego uruchomienia urządzenia, co prowadzi do stanu odmowy usługi (DoS). Problem wynika z niewłaściwego przetwarzania źle sformatowanych pakietów CAPWAP.

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to execute persistent code at boot time and break the chain of trust. This is due to improper validation of software packages. An attacker could place a crafted file in a specific location on the device.

Multiple vulnerabilities in Cisco IOS XE Software due to path traversal and improper image integrity validation could allow an authenticated local attacker with level-15 privileges or an unauthenticated attacker with physical access to execute persistent code at boot time and break the chain of trust.

Podatność w protokole Simple Network Management Protocol (SNMP) w oprogramowaniu Cisco IOS XE może pozwolić uwierzytelnionemu, zdalnemu atakującemu na spowodowanie warunków odmowy usługi (DoS) na dotkniętym urządzeniu. Problem wynika z niewłaściwego zarządzania błędami podczas analizy określonego żądania SNMP.

Podatność w obsłudze niektórych ramek Ethernet w oprogramowaniu Cisco IOS XE dla przełączników serii Catalyst 9000 może pozwolić nieautoryzowanemu, sąsiedniemu atakującemu na zablokowanie portu wyjściowego i zrzucenie całego ruchu wychodzącego. Problem wynika z niewłaściwej obsługi spreparowanych ramek Ethernet.

A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) could allow an unauthenticated, remote attacker to access the public-key infrastructure (PKI) server running on an affected device. This is due to incomplete cleanup upon completion of the Day One setup process. An attacker could send SCEP requests to the device, obtain a certificate from the virtual wireless controller, and use it to join an attacker-controlled device to the controller.

A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS) on an affected device. This is due to improper sanitization of user-supplied input.

Podatność w implementacji protokołu TACACS+ w oprogramowaniu Cisco IOS i Cisco IOS XE może pozwolić nieautoryzowanemu, zdalnemu atakującemu na przeglądanie wrażliwych danych lub ominięcie uwierzytelnienia. Problem wynika z braku odpowiedniej weryfikacji skonfigurowanego wspólnego klucza TACACS+.

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This is due to a buffer overflow, and an attacker with a low-privileged account could exploit it using crafted commands.

A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an unauthenticated, adjacent attacker to modify the IPv6 gateway on an affected device. The vulnerability is due to a logic error when processing IPv6 RA packets from wireless clients. A successful exploit could temporarily change the IPv6 gateway and cause intermittent packet loss for associated wireless clients.

A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent attacker to inject wireless 802.11 action frames with arbitrary information. This vulnerability is due to insufficient verification checks of incoming 802.11 action frames.

A vulnerability in the access control list (ACL) processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the improper enforcement of the implicit deny all at the end of a configured ACL. An attacker could exploit this vulnerability by attempting to send unauthorized traffic to an interface on an affected device.

Podatność w subsystemie API HTTP oprogramowania Cisco IOS XE może umożliwić zdalnemu atakującemu wstrzyknięcie poleceń, które będą wykonywane z uprawnieniami roota w systemie operacyjnym. Problem wynika z niewystarczającej walidacji danych wejściowych.

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page.