Vulnerabilities (CVE)

Vendor filter

Cisco Subscribe

Product filter

Ios Subscribe

Filter

546 total CVE
CVE Vendors Products Updated CVSS
CVE-2007-5547 1 Cisco 1 Ios 2008-11-15 4.3
Cross-site scripting (XSS) vulnerability in Cisco IOS allows remote attackers to inject arbitrary web script or HTML, and execute IOS commands, via unspecified vectors, aka PSIRT-2022590358. NOTE: as of 20071016, the only disclosure is a vague...
CVE-2003-0647 1 Cisco 1 Ios 2008-09-10 7.5
Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request.
CVE-2000-0345 1 Cisco 7 Router 3600, Ios, Router 2500 and 4 more 2008-09-10 2.1
The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command.
CVE-2000-0268 1 Cisco 12 Ios, Accesspath, 3660 Router and 9 more 2008-09-10 5.0
Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot.
CVE-2000-0380 1 Cisco 1 Ios 2008-09-10 7.1
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
CVE-1999-0775 1 Cisco 1 Ios 2008-09-09 10.0
Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list.
CVE-1999-0445 1 Cisco 1 Ios 2008-09-09 5.0
In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.
CVE-1999-0293 1 Cisco 1 Ios 2008-09-09 7.5
AAA authentication on Cisco systems allows attackers to execute commands without authorization.
CVE-1999-0230 1 Cisco 1 Ios 2008-09-09 5.0
Buffer overflow in Cisco 7xx routers through the telnet service.
CVE-1999-0162 1 Cisco 1 Ios 2008-09-09 5.0
The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering.
CVE-1999-0161 1 Cisco 1 Ios 2008-09-09 7.5
In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.
CVE-1999-0160 1 Cisco 1 Ios 2008-09-09 7.5
Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections.
CVE-1999-0159 1 Cisco 1 Ios 2008-09-09 5.0
Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11.x releases.
CVE-1999-0063 1 Cisco 1 Ios 2008-09-09 5.0
Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.
CVE-1999-0016 6 Cisco, Microsoft, Netbsd and 3 more 8 Hp-ux, Windows Nt, Ios and 5 more 2008-09-09 5.0
Land IP denial of service.
CVE-2007-5552 1 Cisco 1 Ios 2008-09-05 9.3
Integer overflow in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known...
CVE-2007-5551 1 Cisco 1 Ios 2008-09-05 7.1
Off-by-one error in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information....
CVE-2007-5550 1 Cisco 1 Ios 2008-09-05 5.0
Unspecified vulnerability in Cisco IOS allows remote attackers to obtain the IOS version via unspecified vectors involving a "common network service", aka PSIRT-1255024833. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with...
CVE-2002-2315 1 Cisco 1 Ios 2008-09-05 7.8
Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a denial of service (memory consumption) via spoofed ICMP redirect packets to the router.
CVE-2002-2053 1 Cisco 1 Ios 2008-09-05 5.0
The design of the Hot Standby Routing Protocol (HSRP), as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service (CPU consumption) via a router with the same IP address as the interface on which HSRP...