Threat database

CVE-2018-0147 is a high-severity vulnerability in Cisco Secure Access Control System (ACS) involving insecure Java deserialization. This flaw allows an unauthenticated remote attacker to execute arbitrary commands on affected devices by exploiting unsafe deserialization of user-supplied data. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2015-0666 is a directory traversal vulnerability in the fmserver servlet of Cisco Prime Data Center Network Manager (DCNM) that allows remote attackers to read arbitrary files on the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2017-12232 is a denial-of-service vulnerability in Cisco IOS software running on Cisco Integrated Services Routers Generation 2 (ISR G2). An unauthenticated attacker adjacent to the device can exploit a protocol implementation flaw to cause the router to reload, disrupting network availability. This vulnerability has been exploited in the wild.

CVE-2018-0180 is a vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software that allows an unauthenticated remote attacker to cause a denial of service by triggering a system reload. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0179 is a high-severity vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software. It allows an unauthenticated remote attacker to cause the affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2018-0161 is a vulnerability in the SNMP subsystem of Cisco IOS Software on certain Cisco Catalyst Switch models. It allows an authenticated remote attacker to cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2017-12231 is a vulnerability in Cisco IOS software's Network Address Translation (NAT) implementation that allows an unauthenticated remote attacker to cause a denial of service. This flaw affects Cisco IOS devices and has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0154 is a high-severity vulnerability in the crypto engine of Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software. It allows an unauthenticated remote attacker to cause a denial-of-service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0159 is a denial-of-service vulnerability in the Internet Key Exchange Version 1 (IKEv1) implementation of Cisco IOS and IOS XE Software. An unauthenticated remote attacker can exploit this flaw to cause the affected device to reload, disrupting network operations. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0158 is a high-severity vulnerability in Cisco IOS and IOS XE Software affecting the Internet Key Exchange Version 1 (IKEv1) implementation. An unauthenticated remote attacker can exploit this flaw to cause the affected device to reload, resulting in a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0156 is a vulnerability in the Smart Install feature of Cisco IOS and IOS XE Software that allows an unauthenticated remote attacker to cause a device reload, resulting in a denial-of-service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

CVE-2018-0174 is a high-severity vulnerability in Cisco IOS and IOS XE Software related to improper input validation in the DHCP option 82 encapsulation functionality. This flaw can be exploited to cause a denial-of-service (DoS) condition. The vulnerability has been observed to be exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2017-12319 is a vulnerability in Cisco IOS XE Software's Border Gateway Protocol (BGP) over Ethernet Virtual Private Network (EVPN) that allows an unauthenticated remote attacker to cause a device reload, leading to denial of service, or potentially corrupt the BGP routing table, causing network instability.

CVE-2018-0173 is a vulnerability in Cisco IOS and IOS XE Software related to improper input validation in the function that restores encapsulated option 82 information in DHCPv4 packets. This flaw can be exploited to cause a denial-of-service (DoS) condition. The vulnerability has been observed to be exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2018-0172 is a high-severity vulnerability in Cisco IOS and IOS XE Software related to improper input validation in the DHCP option 82 encapsulation functionality. This flaw can be exploited to cause a denial-of-service (DoS) condition. The vulnerability has been observed to be exploited in the wild. No specific affected versions or patch information is provided in the input data.

CVE-2018-0151 is a high-severity vulnerability in the Quality of Service (QoS) subsystem of Cisco IOS and IOS XE Software. It allows an unauthenticated remote attacker to cause denial of service or execute arbitrary code with elevated privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2017-6743 is a high-severity vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE software. It allows an authenticated remote attacker to execute arbitrary code on affected devices. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2017-6740 is a vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code or cause the system to reload. It has been exploited in the wild. The vulnerability is classified as high severity due to its potential impact on system availability and control.

CVE-2017-6739 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code or cause the system to reload. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2017-6738 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code remotely. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.