Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to …
Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control l…
Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control l…
Cisco Cache Engine allows an attacker to replace content in the cache.
The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.
Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.
Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in th…
A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication.
Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.
Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword…
In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.
The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration.
Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port.
Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.
Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the superviso…
Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering.
Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and locati…
Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service.
By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative…
AAA authentication on Cisco systems allows attackers to execute commands without authorization.
Buffer overflow in Cisco 7xx routers through the telnet service.
Land IP denial of service.
Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections.
In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.
Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be de…
Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, …
Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used…