Vulnerabilidades de Cisco
CVEs publicadas que afetam produtos de Cisco: 483 registro(s), com severidade, exploração e correções.
Cisco Secure Firewall Threat Defense (FTD) Software 66Cisco Identity Services Engine Software 63Secure Firewall Threat Defense 51Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 45Ios Xe 43Identity Services Engine 42Ios 42Adaptive Security Appliance Software 39Cisco ISE Passive Identity Connector 32Cisco IOS XE Software 30Cisco Secure Firewall Management Center (FMC) 28Identity Services Engine Passive Identity Connector 26Catalyst Sd-wan Manager 21Cisco NX-OS Software 18Ios Xr 16Cisco Secure Endpoint 15Cisco Unified Computing System (Standalone) 14Cisco Unified Computing System (Managed) 13Enterprise Nfv Infrastructure Software 12Cisco IOS XR Software 12Unified Computing System 12Cisco UTD SNORT IPS Engine Software 12Cisco Unified Computing System E-Series Software (UCSE) 12Cyber Vision 11Cisco RoomOS Software 10Cisco NX-OS System Software in ACI Mode 10Snort 10Nexus Dashboard 10Cisco Secure Email 9Unity Connection 9Unified Contact Center Express 9Unified Computing System E-series Software 9Unified Threat Defense Snort Intrusion Prevention System Engine 9Cisco License On-Prem 8Roomos 8Cisco Catalyst SD-WAN Controller 7Cisco Campus Gateway Software 7Cisco Meraki MR Wireless Access Points Software 7Cisco Meraki MX Firmware 7Roomos Cloud 7
CVE-2016-6366
Alta · 8.8
KEV Urgente · 76 Exploit público CWE-120 18/08/2016
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
CVE-2015-0666
Alta · 7.5
KEV Alta · 59 CWE-22 03/04/2015
Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
CVE-2014-2120
Média · 6.1
KEV Alta · 53 CWE-79 18/03/2014
Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.
CVE-2010-3035
Alta · 7.5
KEV Alta · 58 30/08/2010
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.
CVE-2009-2055
Média · 5.9
KEV Alta · 51 CWE-20 19/08/2009
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.
CVE-2008-4128
Alta · 8.1
KEV Alta · 64 Exploit público CWE-352 18/09/2008
Cisco IOS Cross-Site Request Forgery Vulnerability
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.
CVE-2004-1464
Média · 5.9
KEV Alta · 52 CWE-400 31/12/2004
Cisco IOS Denial-of-Service Vulnerability
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
CVE-2001-1210
Média · 6.4
30/12/2001
Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface…
Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.