Cisco
Page 70 of 70 — Cisco CVEs from a corpus of 6997, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-0895 | | 2001-11-15 | Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's in… | |
CVE-2001-0669 | | 2001-10-30 | Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3)… | |
CVE-2001-0783 | | 2001-10-18 | Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command. | |
CVE-2001-0757 | | 2001-10-18 | Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a password has not been set for vtys, which allo… | |
CVE-2001-0754 | | 2001-10-18 | Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause it to enter… | |
CVE-2001-0753 | | 2001-10-18 | Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorize… | |
CVE-2001-0752 | | 2001-10-18 | Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route option set. | |
CVE-2001-0751 | | 2001-10-18 | Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack… | |
CVE-2001-0750 | | 2001-10-18 | Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports 3100-3999, 5100-5999, 7100-7999 and 101… | |
CVE-2001-0741 | | 2001-10-18 | Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets. | |
CVE-2001-1098 | | 2001-10-10 | Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by rea… | |
CVE-2001-1071 | | 2001-10-09 | Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP… | |
CVE-2001-0650 | | 2001-09-20 | Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attri… | |
CVE-2001-1105 | | 2001-09-12 | RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL… | |
CVE-2001-1065 | | 2001-08-31 | Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration servic… | |
CVE-2001-1064 | | 2001-08-31 | Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the… | |
CVE-2001-0711 | | 2001-08-31 | Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP comm… | |
CVE-2001-0622 | | 2001-08-14 | The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additi… | |
CVE-2001-0621 | | 2001-08-14 | The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and… | |
CVE-2001-0566 | | 2001-08-14 | Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP is disabled. | |
CVE-2001-1097 | | 2001-07-24 | Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets. | |
CVE-2001-0537 | | 2001-07-21 | HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by spe… | |
CVE-2001-1183 | | 2001-07-12 | PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet. | |
CVE-2001-1038 | | 2001-07-11 | Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port 8023. | |
CVE-2001-0444 | | 2001-07-02 | Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, w… | |
CVE-2001-0429 | | 2001-07-02 | Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port, which causes a network stor… | |
CVE-2001-0428 | | 2001-07-02 | Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP option. | |
CVE-2001-0455 | | 2001-06-27 | Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows remote attackers to modify its configu… | |
CVE-2001-0427 | | 2001-06-18 | Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL se… | |
CVE-2001-0412 | | 2001-06-18 | Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode. | |
CVE-2001-0375 | | 2001-06-18 | Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via a large nu… | |
CVE-2001-0288 | | 2001-05-03 | Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hija… | |
CVE-2000-0368 | | 2001-03-12 | Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow t… | |
CVE-2004-1776 | | 2001-02-28 | Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by th… | |
CVE-2001-1434 | | 2001-02-28 | Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command, which cre… | |
CVE-2001-0058 | | 2001-02-16 | The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a URL that does not end in a spac… | |
CVE-2001-0057 | | 2001-02-16 | Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet. | |
CVE-2001-0056 | | 2001-02-16 | The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords with… | |
CVE-2001-0055 | | 2001-02-16 | CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets. | |
CVE-2001-0041 | | 2001-02-16 | Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentic… | |
CVE-2001-0080 | | 2001-02-12 | Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-SSH client, which g… | |
CVE-2001-0020 | | 2001-02-12 | Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot)… | |
CVE-2001-0019 | | 2001-02-12 | Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show… | |
CVE-2001-1037 | | 2001-01-08 | Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and execute certain restricted commands wit… | |
CVE-2001-0163 | | 2001-01-01 | Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. | |
CVE-2001-0161 | | 2001-01-01 | Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it easier for remote atta… | |
CVE-2000-0984 | | 2000-12-19 | The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string. | |
CVE-2000-0955 | | 2000-12-19 | Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the commun… | |
CVE-2000-0945 | | 2000-12-19 | The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable pass… | |
CVE-2000-1056 | | 2000-12-11 | CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords. | |
CVE-2000-1055 | | 2000-12-11 | Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a… | |
CVE-2000-1054 | | 2000-12-11 | Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitr… | |
CVE-2000-1027 | | 2000-12-11 | Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, whi… | |
CVE-2000-1022 | | 2000-12-11 | The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to exec… | |
CVE-2000-0700 | | 2000-10-20 | Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, d… | |
CVE-2000-0486 | | 2000-05-30 | Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long length field. | |
CVE-2000-0345 | | 2000-05-03 | The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command. | |
CVE-2000-0380 | | 2000-04-26 | The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that… | |
CVE-2000-0268 | | 2000-04-20 | Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it… | |
CVE-2000-0267 | | 2000-04-20 | Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password. | |
CVE-2000-0613 | | 2000-03-20 | Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate co… | |
CVE-2000-0150 | | 2000-02-12 | Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misi… | |
CVE-1999-1465 | | 1999-12-31 | Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when… | |
CVE-1999-1464 | | 1999-12-31 | Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when… | |
CVE-1999-1175 | | 1999-12-31 | Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect H… | |
CVE-1999-1126 | | 1999-12-31 | Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration informati… | |
CVE-1999-1100 | | 1999-12-31 | Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DE… | |
CVE-1999-1042 | | 1999-12-31 | Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as u… | |
CVE-1999-1001 | | 1999-12-16 | Cisco Cache Engine allows a remote attacker to gain access via a null username and password. | |
CVE-1999-1000 | | 1999-12-16 | The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics. | |
CVE-1999-0998 | | 1999-12-16 | Cisco Cache Engine allows an attacker to replace content in the cache. | |
CVE-1999-0843 | | 1999-11-04 | Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port. | |
CVE-1999-1129 | | 1999-09-01 | Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking… | |
CVE-1999-0734 | | 1999-08-19 | A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication. | |
CVE-1999-0889 | | 1999-07-01 | Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set. | |
CVE-1999-0775 | | 1999-06-10 | Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an acc… | |
CVE-1999-0445 | | 1999-04-01 | In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters. | |
CVE-1999-0416 | | 1999-03-11 | Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port. | |
CVE-1999-0415 | | 1999-03-11 | The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration. | |
CVE-1999-0430 | | 1999-03-01 | Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module t… | |
CVE-1999-0222 | | 1999-03-01 | Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL. | |
CVE-1999-0063 | | 1999-01-11 | Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port. | |
CVE-1999-0453 | | 1999-01-01 | An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP). | |
CVE-1999-0162 | | 1998-09-01 | The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering. | |
CVE-1999-0158 | | 1998-08-31 | Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is know… | |
CVE-1999-0157 | | 1998-08-18 | Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service. | |
CVE-1999-0159 | Low | 3.5 | 1998-08-12 | Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11… |
CVE-1999-1582 | | 1998-07-15 | By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit h… | |
CVE-1999-0293 | | 1998-01-01 | AAA authentication on Cisco systems allows attackers to execute commands without authorization. | |
CVE-1999-0230 | | 1997-12-15 | Buffer overflow in Cisco 7xx routers through the telnet service. | |
CVE-1999-0016 | | 1997-12-01 | Land IP denial of service. | |
CVE-1999-0160 | | 1997-10-01 | Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections. | |
CVE-1999-0524 | Medium | 4.0 | 1997-08-01 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. |
CVE-1999-0161 | | 1995-07-31 | In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering. | |
CVE-1999-1216 | | 1993-04-22 | Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using… | |
CVE-1999-1466 | | 1992-12-10 | Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certai… | |
CVE-1999-1306 | | 1992-12-10 | Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which coul… |