Browse CVEs

MEDIUM 6.1 CVE-2015-0679 The web-authentication functionality on Cisco Wireless LAN Controller (WLC) devices 7.3(103.8) and 7.4(110.0) allows remote attackers to cause a deni… Wireless Lan Controller Software Mitigation only Fix from $1,6002015-03-28 HIGH 7.9 CVE-2015-0658 The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which a… Nx Os Mitigation only Fix from $1,9502015-03-28 MEDIUM 5.0 CVE-2015-0672 The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a denial of service (service outage) via a flood of craf… Ios Xr Mitigation only Fix from $1,6002015-03-26 HIGH 7.8 CVE-2015-0649 Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Proto… iOS Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0650 The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0648 Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Commo… iOS Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0647 Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Proto… iOS Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0646 Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS be… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0645 The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 be… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0644 AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 … Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0643 Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0641 Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and … Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0642 Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0640 The high-speed logging (HSL) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 … Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0639 The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11 before… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.1 CVE-2015-0638 Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue… iOS Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0637 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS b… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0636 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS b… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 9.0 CVE-2015-0635 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS b… Ios Xe Mitigation only Fix from $1,9502015-03-26 MEDIUM 6.4 CVE-2015-0670 The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows re… Spa500 Firmware Mitigation only Fix from $1,6002015-03-21 MEDIUM 6.4 CVE-2015-0669 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 15.4S and 15.4(3)S allows remote attackers to modify configuration settings… iOS Mitigation only Fix from $1,6002015-03-21 MEDIUM 5.0 CVE-2015-0671 The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.2(1) allows remote attackers to cause a denial of ser… Videoscape Delivery System For Internet Streamer Mitigation only Fix from $1,6002015-03-20 MEDIUM 5.0 CVE-2015-0667 The Management Interface on Cisco Content Services Switch (CSS) 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restri… Content Services Switch 11500 Firmware after 8.20.4.02 Fix from $1,6002015-03-18 MEDIUM 6.6 CVE-2015-0663 Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages, which allows local users… Anyconnect Secure Mobility Client after 4.0 Fix from $1,6002015-03-17 MEDIUM 6.6 CVE-2015-0665 The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary files via crafted IPC… Anyconnect Secure Mobility Client after 4.0 Fix from $1,6002015-03-17 HIGH 7.2 CVE-2015-0662 Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to gain privileges via crafted IPC messages that trigger use of ro… Anyconnect Secure Mobility Client after 4.0 Fix from $1,9502015-03-17 HIGH 7.2 CVE-2015-0660 Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS comman… Telepresence Server Software Mitigation only Fix from $1,9502015-03-14 HIGH 7.1 CVE-2015-0654 Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 a… Intrusion Prevention System Mitigation only Fix from $1,9502015-03-13 HIGH 10.0 CVE-2015-0653 The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before… Expressway Software Mitigation only Fix from $1,9502015-03-13 HIGH 7.8 CVE-2015-0652 The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cis… Expressway Software Mitigation only Fix from $1,9502015-03-13