Browse CVEs

HIGH 9.0 CVE-2013-5530 The web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1 before 1.1.1.268-7, 1.1.2 before 1.1.2.145-10, 1.1.… Identity Services Engine Software Mitigation only Fix from $1,9502013-10-25 MEDIUM 6.8 CVE-2013-5522 Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service M… iOS Mitigation only Fix from $1,6002013-10-25 MEDIUM 5.0 CVE-2013-5521 Cisco Identity Services Engine does not properly restrict the creation of guest accounts, which allows remote attackers to cause a denial of service … Identity Services Engine Software Mitigation only Fix from $1,6002013-10-25 HIGH 7.8 CVE-2013-5537 The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does… Web Security Appliance Mitigation only Fix from $1,9502013-10-24 MEDIUM 5.0 CVE-2013-5536 Cisco Secure Access Control System (ACS) does not properly implement an incoming-packet firewall rule, which allows remote attackers to cause a denia… Secure Access Control System Mitigation only Fix from $1,6002013-10-24 MEDIUM 5.4 CVE-2013-5544 The VPN authentication functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (device… Adaptive Security Appliance Software Mitigation only Fix from $1,6002013-10-22 HIGH 8.5 CVE-2013-5542 Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.2), 8.7 before 8.7(1.8), 9.0 before 9.0(3.6), and 9.1 before 9.1(2.8) allows remote… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-10-21 MEDIUM 5.8 CVE-2012-4115 The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM virtual-media data, which allows man-in-the-middle att… Unified Computing System Mitigation only Fix from $1,6002013-10-21 MEDIUM 5.8 CVE-2012-4114 The fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video data, which allows man-in-the-middle attackers to w… Unified Computing System Mitigation only Fix from $1,6002013-10-19 MEDIUM 5.8 CVE-2012-4117 The fabric-interconnect component in Cisco Unified Computing System (UCS) does not properly verify X.509 certificates, which allows man-in-the-middle… Unified Computing System Mitigation only Fix from $1,6002013-10-19 MEDIUM 6.8 CVE-2012-4112 The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary command… Unified Computing System Mitigation only Fix from $1,6002013-10-19 MEDIUM 6.8 CVE-2013-5529 The deployment module in the server in Cisco WebEx Meeting Center does not properly validate the passphrase, which allows remote attackers to launch … Webex Meetings Server Mitigation only Fix from $1,6002013-10-16 MEDIUM 6.8 CVE-2013-5540 The file-upload feature in Cisco Identity Services Engine (ISE) allows remote authenticated users to cause a denial of service (disk consumption and … Identity Services Engine Software Mitigation only Fix from $1,6002013-10-16 MEDIUM 6.4 CVE-2013-5535 The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by le… Video Surveillance 4000 Ip Camera Mitigation only Fix from $1,6002013-10-16 MEDIUM 6.0 CVE-2013-5539 The upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote authenticated users to upload files with an arbitrary file typ… Identity Services Engine Software Mitigation only Fix from $1,6002013-10-16 MEDIUM 5.0 CVE-2013-5538 The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read arbitrary … Identity Services Engine Software Mitigation only Fix from $1,6002013-10-16 MEDIUM 6.8 CVE-2012-4121 Cisco NX-OS allows local users to gain privileges, and read or modify arbitrary files, via the sed (1) r and (2) w commands, aka Bug IDs CSCts56559, … Nx Os Mitigation only Fix from $1,6002013-10-14 MEDIUM 6.8 CVE-2012-4077 Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651. Nx Os Mitigation only Fix from $1,6002013-10-14 MEDIUM 6.8 CVE-2012-4076 Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library … Nx Os Mitigation only Fix from $1,6002013-10-14 HIGH 10.0 CVE-2013-5509 The SSL implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0 before 9.0(2.6) and 9.1 before 9.1(2) allows remote attackers to bypas… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-10-13 HIGH 10.0 CVE-2013-5511 The Adaptive Security Device Management (ASDM) remote-management feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), … Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-10-13 HIGH 7.8 CVE-2013-5515 The Clientless SSL VPN feature in Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.7… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-10-13 HIGH 7.1 CVE-2013-5507 The IPsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(1.7), when an IPsec VPN tunnel is enabled, allows remote … Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-10-13 HIGH 7.1 CVE-2013-5508 The SQL*Net inspection engine in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x before 8.2(5.44), 8.3.x before 8.3(2.39),… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-10-13 HIGH 7.1 CVE-2013-5512 Race condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x bef… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-10-13 HIGH 7.1 CVE-2013-5513 Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(7), 8.5.x before 8.5(1.18), 8.6.x b… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-10-13 MEDIUM 6.6 CVE-2013-5506 The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before 4.1(13), when multiple-context… Firewall Services Module Software Mitigation only Fix from $1,6002013-10-13 HIGH 7.8 CVE-2013-3415 Cisco Adaptive Security Appliance (ASA) Software 8.4.x before 8.4(3) and 8.6.x before 8.6(1.3) does not properly manage memory upon an AnyConnect SSL… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-10-13 MEDIUM 6.8 CVE-2012-4106 The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, which allows l… Unified Computing System Mitigation only Fix from $1,6002013-10-13 MEDIUM 6.8 CVE-2012-4108 The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary operating-syste… Unified Computing System Mitigation only Fix from $1,6002013-10-13