Browse CVEs

CRITICAL 9.8 CVE-2017-9479 The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to execute arbitr… Dpc3939 Firmware No fix yet Fix from $2,3002017-07-31 CRITICAL 9.8 CVE-2017-9482 The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain root ac… Dpc3939 Firmware No fix yet Fix from $2,3002017-07-31 CRITICAL 9.8 CVE-2017-9483 The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows Network Processor (NP) Linux users… Dpc3939 Firmware No fix yet Fix from $2,3002017-07-31 CRITICAL 9.8 CVE-2017-9521 The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v… Dpc3939 Firmware No fix yet Fix from $2,3002017-07-31 CRITICAL 9.8 CVE-2017-11588 On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V… Residential Gateway Firmware Mitigation only Fix from $2,3002017-07-24 CRITICAL 9.8 CVE-2017-11589 On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V… Residential Gateway Firmware Mitigation only Fix from $2,3002017-07-24 CRITICAL 9.8 CVE-2017-11502EPSS 5% Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with "GET /../" on TCP port 4321. Dpc3928ad Docsis Wireless Router Firmware No fix yet Fix from $2,3002017-07-20 CRITICAL 9.8 CVE-2017-6708 A vulnerability in the symbolic link (symlink) creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allow an unaut… Ultra Services Framework after 5.0.2 Fix from $2,3002017-07-06 CRITICAL 9.8 CVE-2017-6709 A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to access administrative c… Ultra Services Framework after 5.0.2 Fix from $2,3002017-07-06 CRITICAL 9.8 CVE-2017-6713 A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to gain full access … Elastic Services Controller Mitigation only Fix from $2,3002017-07-06 CRITICAL 9.8 CVE-2017-6714 A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arb… Ultra Services Framework Staging Server after 5.0.2 Fix from $2,3002017-07-06 CRITICAL 9.1 CVE-2017-6711 A vulnerability in the Ultra Automation Service (UAS) of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to gain u… Ultra Services Framework after 5.0.2 Fix from $2,3002017-07-06 CRITICAL 9.8 CVE-2017-6667 A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an unauthentic… Context Service Development Kit Mitigation only Fix from $2,3002017-06-13 CRITICAL 9.8 CVE-2017-6639EPSS 28% A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticate… Prime Data Center Network Manager Mitigation only Fix from $2,3002017-06-08 CRITICAL 9.8 CVE-2017-6640EPSS 8% A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administr… Prime Data Center Network Manager Mitigation only Fix from $2,3002017-06-08 CRITICAL 9.8 CVE-2017-6622EPSS 51% A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authenticat… Prime Collaboration Provisioning No fix yet Fix from $2,3002017-05-18 CRITICAL 9.6 CVE-2017-3882 A vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, Layer… Small Business Rv Router Firmware Mitigation only Fix from $2,3002017-05-16 CRITICAL 9.8 CVE-2017-3834 A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allow an unaut… Aironet Access Point Firmware Mitigation only Fix from $2,3002017-04-06 CRITICAL 9.8 CVE-2017-3853EPSS 8% A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an unauthenticated, remote attac… Iox Mitigation only Fix from $2,3002017-03-22 CRITICAL 9.8 CVE-2017-3881 KEVEPSS 99% A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated,… iOS after 15.1 Fix from $2,3002017-03-17 CRITICAL 9.8 CVE-2017-3831 A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass au… Aironet Access Point Software Mitigation only Fix from $2,3002017-03-15 CRITICAL 10.0 CVE-2017-3791 A vulnerability in the web-based GUI of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication and execute actions… Cisco Prime Home Mitigation only Fix from $2,3002017-02-01 CRITICAL 9.8 CVE-2017-3792EPSS 6% A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software could allow an unauthentica… Telepresence Mcu Software Mitigation only Fix from $2,3002017-02-01 CRITICAL 9.8 CVE-2016-9223 A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator (CCO; formerly CliQr) could allow an unauthenticated, remote att… Cloudcenter Orchestrator Mitigation only Fix from $2,3002016-12-26 CRITICAL 9.8 CVE-2016-6452 A vulnerability in the web-based graphical user interface (GUI) of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authent… Prime Home Mitigation only Fix from $2,3002016-11-03 CRITICAL 9.8 CVE-2016-6448 A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to execute a… Meeting Server Mitigation only Fix from $2,3002016-11-03 CRITICAL 9.8 CVE-2016-6447 A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected syst… Meeting App Mitigation only Fix from $2,3002016-11-03 CRITICAL 9.8 CVE-2016-6441 A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a r… Ios Xe Mitigation only Fix from $2,3002016-11-03 CRITICAL 9.8 CVE-2016-6397 A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System (IPICS) Universal Media Service… Ip Interoperability And Collaboration System Mitigation only Fix from $2,3002016-10-28 CRITICAL 9.1 CVE-2016-6445 A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server befo… Meeting Server Mitigation only Fix from $2,3002016-10-27