Browse CVEs

MEDIUM 5.0 CVE-2001-0429 Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port, which causes a ne… Catos Patch available Fix from $1,6002001-07-02 HIGH 7.5 CVE-2001-0455 Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows remote attackers to modify i… Aironet 340 after 8.55 Fix from $1,9502001-06-27 HIGH 7.2 CVE-2001-0412 Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode. Content Services Switch 11050 Patch available Fix from $1,9502001-06-18 HIGH 7.1 CVE-2001-0427 Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) … Vpn 3000 Concentrator Patch available Fix from $1,9502001-06-18 MEDIUM 5.0 CVE-2001-0375EPSS 10% Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via … Pix Firewall 515 Patch available Fix from $1,6002001-06-18 HIGH 7.5 CVE-2001-0288EPSS 5% Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spo… iOS after 12.1 Fix from $1,9502001-05-03 HIGH 7.5 CVE-2004-1776 Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string … iOS Patch available Fix from $1,9502001-02-28 MEDIUM 5.0 CVE-2001-1434 Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command,… iOS Mitigation only Fix from $1,6002001-02-28 HIGH 7.8 CVE-2001-0041EPSS 12% Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet… Catos Patch available Fix from $1,9502001-02-16 HIGH 7.5 CVE-2001-0056 The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess pass… Broadband Operating System after 2.4.1 Fix from $1,9502001-02-16 MEDIUM 5.0 CVE-2001-0055 CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets. Broadband Operating System after 2.3.8 Fix from $1,6002001-02-16 MEDIUM 5.0 CVE-2001-0057 Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet. Broadband Operating System after 2.4.1 Fix from $1,6002001-02-16 MEDIUM 5.0 CVE-2001-0058 The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a URL that does not end… Broadband Operating System after 2.4.1 Fix from $1,6002001-02-16 MEDIUM 5.0 CVE-2001-0080EPSS 9% Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-SSH clien… Catalyst 4000 Patch available Fix from $1,6002001-02-12 MEDIUM 5.0 CVE-2001-0161 Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it easier for r… Aironet No fix yet Fix from $1,6002001-01-01 HIGH 10.0 CVE-2000-0945EPSS 73% The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the e… Catalyst 3500 Xl Patch available Fix from $1,9502000-12-19 HIGH 7.5 CVE-2000-0955 Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows … Virtual Central Office 4000 after 5.1.3 Fix from $1,9502000-12-19 MEDIUM 5.0 CVE-2000-0984 The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string. iOS Patch available Fix from $1,6002000-12-19 HIGH 10.0 CVE-2000-1054EPSS 8% Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly exec… Secure Access Control Server Patch available Fix from $1,9502000-12-11 HIGH 10.0 CVE-2000-1055 Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary comm… Secure Access Control Server Patch available Fix from $1,9502000-12-11 HIGH 7.5 CVE-2000-1022EPSS 7% The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attacke… Pix Firewall Software Patch available Fix from $1,9502000-12-11 HIGH 7.5 CVE-2000-1056 CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null password… Secure Access Control Server Patch available Fix from $1,9502000-12-11 MEDIUM 5.0 CVE-2000-1027 Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV req… Pix Firewall Software No fix yet Fix from $1,6002000-12-11 MEDIUM 5.0 CVE-2000-0700 Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions … iOS Patch available Fix from $1,6002000-10-20 MEDIUM 5.0 CVE-2000-0486 Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long length field. iOS Patch available Fix from $1,6002000-05-30 HIGH 7.1 CVE-2000-0380EPSS 35% The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a… iOS Mitigation only Fix from $1,9502000-04-26 MEDIUM 5.0 CVE-2000-0268 Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to… iOS Patch available Fix from $1,6002000-04-20 MEDIUM 5.0 CVE-2000-0613EPSS 9% Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close leg… Pix Firewall Mitigation only Fix from $1,6002000-03-20 HIGH 7.5 CVE-2000-0150 Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firew… Pix Firewall Software Mitigation only Fix from $1,9502000-02-12 HIGH 7.5 CVE-1999-1100 Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length… Pix Private Link after 4.1 Fix from $1,9501999-12-31