CVE-2023-20209 is a medium severity vulnerability in Cisco TelePresence Video Communication Server (VCS) Expressway's web-based management interface. It allows an authenticated attacker with read-write privileges to perform command injection, potentially leading to remote code execution with root privileges. Exploitation requires no user interaction but does require high-level privileges on the device. The vulnerability stems from insufficient input validation in the management interface. Although no known exploits are currently in the wild, successful exploitation could severely compromise affected systems. The vulnerability affects numerous versions of Cisco VCS Expressway, widely used in enterprise video communication. European organizations using these products are at risk, especially those with critical video conferencing infrastructure. Mitigation involves applying vendor patches once available, restricting access to management interfaces, and monitoring for suspicious activity. Countries with high Cisco market penetration and strategic reliance on video communications, such as Germany, France, UK, and the Netherlands, are most likely to be impacted.
CVE-2004-1464 is a denial-of-service vulnerability in Cisco IOS that can block telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and sometimes HTTP access to affected devices. This vulnerability has been exploited in the wild and poses a high risk of service disruption.
CVE-2016-6415 is an information disclosure vulnerability in Cisco IOS, IOS XR, and IOS XE affecting the Internet Key Exchange version 1 (IKEv1) security negotiation process. The vulnerability arises from insufficient condition checks in the code handling IKEv1 requests, allowing an attacker to retrieve memory contents. This could lead to unauthorized disclosure of sensitive information. The vulnerability has been exploited in the wild. No explicit patch information is provided in the input data.
CVE-2017-6742 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software. It allows an authenticated remote attacker to execute arbitrary code or cause the affected system to reload. This vulnerability has been exploited in the wild. No explicit affected versions or patch information is provided in the input data.
CVE-2020-3433 is a DLL hijacking vulnerability in Cisco AnyConnect Secure Mobility Client for Windows. The vulnerability arises from insufficient validation of resources loaded at runtime via the interprocess communication channel. An attacker with valid Windows credentials could exploit this flaw to execute code with SYSTEM privileges on the affected machine. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2020-3153 is a vulnerability in Cisco AnyConnect Secure Mobility Client for Windows involving improper handling of directory paths. An attacker with valid Windows credentials can exploit this flaw to copy malicious files to arbitrary locations with system-level privileges, enabling attacks such as DLL pre-loading and DLL hijacking. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.
CVE-2019-15271 is a deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers. This flaw could allow an attacker to execute code with root privileges on affected devices. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2016-6366 is a high-severity buffer overflow vulnerability in the SNMP code of Cisco Adaptive Security Appliance (ASA) software. Exploitation of this flaw could allow an attacker to cause the affected device to reload or execute arbitrary code remotely. This vulnerability has been observed exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2016-6367 is a high-severity vulnerability in the command-line interface (CLI) parser of Cisco Adaptive Security Appliance (ASA) software. It allows an authenticated local attacker to cause a denial-of-service (DoS) condition or potentially execute arbitrary code. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
Cisco IOS XR software activates a health check feature that opens TCP port 6379 by default. This port exposes a Redis instance running within the NOSi container, which an attacker can connect to and potentially access. The vulnerability is known as CVE-2022-20821 and has been exploited in the wild. No specific affected versions or patch information are provided.
CVE-2010-3035 is a denial-of-service vulnerability in Cisco IOS XR when Border Gateway Protocol (BGP) is configured. Remote attackers can exploit this flaw to cause a DoS condition on affected devices. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2009-2055 is a high-severity vulnerability in Cisco IOS XR when Border Gateway Protocol (BGP) is configured. It allows remote attackers to cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2017-3881 is a high-severity vulnerability in Cisco IOS and IOS XE software affecting the Cisco Cluster Management Protocol (CMP) processing code. It allows an unauthenticated remote attacker to cause a device reload or execute code with elevated privileges. This vulnerability has been exploited in the wild.
CVE-2015-0666 is a directory traversal vulnerability in the fmserver servlet of Cisco Prime Data Center Network Manager (DCNM) that allows remote attackers to read arbitrary files on the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2018-0147 is a high-severity vulnerability in Cisco Secure Access Control System (ACS) involving insecure Java deserialization. This flaw allows an unauthenticated remote attacker to execute arbitrary commands on affected devices by exploiting unsafe deserialization of user-supplied data. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2018-0125 is a high-severity vulnerability in the web interface of Cisco VPN Routers that allows an unauthenticated remote attacker to execute arbitrary code with root privileges, potentially gaining full control of the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
