Threat database

CVE-2017-12240 is a high-severity vulnerability in the DHCP relay subsystem of Cisco IOS and IOS XE Software. It allows an unauthenticated remote attacker to execute arbitrary code and gain full control over the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2017-12237 is a denial-of-service vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS and IOS XE software. An unauthenticated remote attacker can exploit this flaw to cause high CPU utilization, traceback messages, or device reloads, resulting in denial of service. This vulnerability has been exploited in the wild.

CVE-2017-6744 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS software that allows an authenticated remote attacker to execute code or cause the system to reload by sending a crafted SNMP packet over IPv4 or IPv6. This vulnerability has been exploited in the wild.

CVE-2017-12235 is a vulnerability in Cisco IOS software for Cisco Industrial Ethernet Switches affecting the PROFINET Discovery and Configuration Protocol (PN-DCP). An unauthenticated remote attacker can exploit this flaw to cause the device to reload, resulting in a denial of service. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the input data.

CVE-2017-12234 is a vulnerability in Cisco IOS software's implementation of the Common Industrial Protocol (CIP) feature. An unauthenticated remote attacker can exploit this flaw to cause the affected device to reload, resulting in a denial of service condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2017-12233 is a vulnerability in Cisco IOS software's Common Industrial Protocol (CIP) feature that allows an unauthenticated remote attacker to cause the device to reload, resulting in a denial of service. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2017-12232 is a denial-of-service vulnerability in Cisco IOS software running on Cisco Integrated Services Routers Generation 2 (ISR G2). An unauthenticated attacker adjacent to the device can exploit a protocol implementation flaw to cause the router to reload, disrupting network availability. This vulnerability has been exploited in the wild.

CVE-2017-12231 is a vulnerability in Cisco IOS software's Network Address Translation (NAT) implementation that allows an unauthenticated remote attacker to cause a denial of service. This flaw affects Cisco IOS devices and has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0175 is a format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem affecting Cisco IOS, IOS XE, and IOS XR software. This vulnerability allows an unauthenticated, adjacent attacker to cause a denial of service (DoS) or execute arbitrary code with elevated privileges on affected devices. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the input data.

CVE-2018-0167 is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS, IOS XE, and IOS XR software. An unauthenticated attacker adjacent to the vulnerable device could exploit this flaw to cause a denial of service or execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

CVE-2022-20708 is a stack-based buffer overflow vulnerability affecting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. This vulnerability allows an attacker to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS). It has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

CVE-2022-20703 is a stack-based buffer overflow vulnerability affecting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. This vulnerability allows attackers to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause denial of service (DoS). It has been exploited in the wild. No explicit patch information is provided in the input data.

CVE-2022-20701 is a stack-based buffer overflow vulnerability affecting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. This flaw could allow an attacker to execute arbitrary code, elevate privileges, bypass authentication and authorization, run unsigned software, or cause denial of service. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2022-20700 is a stack-based buffer overflow vulnerability affecting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. This flaw allows attackers to execute arbitrary code, elevate privileges, bypass authentication and authorization, run unsigned software, or cause denial of service. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers contain a stack-based buffer overflow vulnerability that can be exploited to execute arbitrary code, elevate privileges, bypass authentication and authorization, run unsigned software, or cause denial of service. This vulnerability has been exploited in the wild. No explicit patch information is provided in the input data.

CVE-2019-1652 is a high-severity vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers. It allows an authenticated remote attacker with administrative privileges to execute arbitrary commands on the affected device. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0155 is a denial-of-service vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series and 4500-X Series Switches. An unauthenticated remote attacker can exploit this flaw to crash the iosd process, causing a DoS condition. This vulnerability has been exploited in the wild.

CVE-2017-12238 is a vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS for Catalyst 6800 Series Switches. It allows an unauthenticated, adjacent attacker to cause a denial of service. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2020-3452 is a high-severity vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) that allows attackers to exploit improper input validation in HTTP request URL processing. By sending crafted HTTP requests with directory traversal sequences, attackers can read arbitrary files on the device's web services file system. This vulnerability has been exploited in the wild.

CVE-2021-1497 is a command injection vulnerability in the Cisco HyperFlex HX Installer Virtual Machine. It arises from insufficient input validation, allowing an attacker to execute arbitrary commands with root privileges on the affected device. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.