CVE Vulnerability Advisory Database

[Affected Scope] Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or cause a complete system compromise via the SSL VPN gateway

[Mitigation] Immediately upgrade to the latest patched firmware versions provided by Cisco, and restrict access to the SSL VPN port from untrusted networks

[Affected Scope] Systems running Cisco HyperFlex HX Data Platform with the web-based management interface enabled

[Impact] Unauthenticated, remote attackers can execute arbitrary system commands with root privileges on the affected device by sending crafted HTTP requests

[Mitigation] Immediately apply the official security patches provided by Cisco and restrict external access to the web management interface

[Affected Scope] Web-based management interface of Cisco HyperFlex HX Data Platform

[Impact] Unauthenticated, remote attackers can execute arbitrary OS commands with system privileges, leading to complete device compromise

[Mitigation] Apply official Cisco security patches immediately, or restrict network access to TCP ports 80/443 to trusted administrative networks

[Affected Scope] Cisco ASA and FTD Software with AnyConnect or WebVPN configurations enabled

[Impact] Unauthenticated remote attackers can execute arbitrary script code in the user's browser context, potentially compromising session tokens and sensitive data

[Mitigation] Apply official Cisco software updates immediately and restrict access to the web services interface

[Affected Scope] Cisco IOS XR Software with the Distance Vector Multicast Routing Protocol (DVMRP) feature enabled

[Impact] An unauthenticated, remote attacker can cause an immediate crash of the IGMP process or exhaust system memory, leading to instability in critical routing protocols and denial of service (DoS)

[Mitigation] Apply official Cisco software updates, disable DVMRP multicast routing where not required, or implement IGMP packet filtering ACLs

[Affected Scope] Cisco IOS XR Software with the Distance Vector Multicast Routing Protocol (DVMRP) feature enabled

[Impact] Unauthenticated, remote attackers can cause complete memory exhaustion, leading to instability or crash of critical routing protocols and system processes (Denial of Service)

[Mitigation] Apply official Cisco software updates immediately, or implement temporary workarounds such as infrastructure ACLs to rate-limit or block unauthorized IGMP traffic

[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.9.03015

[Impact] An authenticated local attacker can exploit the IPC channel to load a malicious DLL, leading to arbitrary code execution with NT AUTHORITY\SYSTEM privileges.

[Mitigation] Immediately upgrade all affected Windows endpoints to Cisco AnyConnect Secure Mobility Client version 4.9.03015 or later.

[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software with WebVPN or AnyConnect features enabled.

[Impact] Unauthenticated, remote attackers can perform directory traversal attacks to read sensitive arbitrary files within the web services file system.

[Mitigation] Immediately apply the official security patches provided by Cisco and restrict access to the web services interface.

[Affected Scope] Cisco ASA Software and Cisco FTD Software with AnyConnect VPN or WebVPN configurations enabled

[Impact] An unauthenticated, remote attacker can retrieve sensitive memory contents (such as user credentials and session tokens) by sending crafted HTTP GET requests

[Mitigation] Apply the official firmware patches provided by Cisco immediately, or restrict access to the web services interface if patching is delayed

[Affected Scope] Cisco IP Phone series running vulnerable firmware versions with the web server service enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or trigger a device reload, leading to a Denial of Service (DoS) condition

[Mitigation] Apply official vendor firmware patches immediately, or disable the Web Access feature and restrict HTTP/HTTPS access via ACLs

[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions 4.8.01090 and prior

[Impact] An authenticated local attacker can copy arbitrary malicious DLL files to system-level directories, leading to arbitrary code execution with SYSTEM privileges

[Mitigation] Immediately upgrade to the patched official release (version 4.8.02042 or later)

[Affected Scope] Cisco network devices running Cisco IOS XR Software with Cisco Discovery Protocol (CDP) enabled

[Impact] An unauthenticated, adjacent attacker in the same Layer 2 broadcast domain can execute arbitrary code with administrative privileges or cause a denial of service (device reload)

[Mitigation] Apply official Cisco software patches immediately, or disable CDP globally/on untrusted interfaces as a temporary workaround

[Affected Scope] Web-based management interface of certain Cisco Small Business RV Series Routers (including RV110W, RV130, RV130W, RV215W).

[Impact] An authenticated, remote attacker with valid credentials or an active session token can execute arbitrary commands with root privileges.

[Mitigation] Apply the official firmware updates from the vendor, or disable remote WAN management and restrict access to the web interface.

[Affected Scope] Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers running vulnerable firmware versions.

[Impact] Unauthenticated remote attackers can download sensitive router configuration files and diagnostic data, potentially exposing administrative credentials and network layouts.

[Mitigation] Apply the official firmware updates provided by Cisco immediately and disable remote WAN management access.

[Affected Scope] Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers

[Impact] An authenticated, remote attacker with administrative privileges can execute arbitrary commands as root on the underlying Linux shell by sending malicious HTTP POST requests

[Mitigation] Immediately apply the official firmware updates released by Cisco and restrict access to the web-based management interface

[Affected Scope] Cisco ASA Software and Cisco FTD Software running on devices with enabled web interfaces (SSL VPN, AnyConnect, Clientless Portal, etc.)

[Impact] Unauthenticated, remote attackers can trigger an unexpected device reload (DoS) or view sensitive system information without authentication via directory traversal

[Mitigation] Apply official software updates from Cisco immediately, restrict web interface access using ACLs, or disable unnecessary HTTP services

[Affected Scope] Cisco devices running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later with Login Enhancements (Login Block) enabled

[Impact] An unauthenticated, remote attacker can trigger an unexpected system reload, leading to a complete Denial of Service (DoS) condition

[Mitigation] Apply the official Cisco IOS software updates, or temporarily disable the 'login block-for' feature and restrict virtual terminal (vty) access using infrastructure ACLs

[Affected Scope] Cisco devices running Cisco IOS Software Releases 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later with Login Enhancements (Login Block) enabled

[Impact] An unauthenticated, remote attacker can trigger an unexpected system reload, leading to a persistent Denial of Service (DoS) condition

[Mitigation] Upgrade to the latest patched Cisco IOS software release or temporarily disable/modify the Login Block configuration

[Affected Scope] Cisco devices running Cisco IOS, IOS XE, or IOS XR Software with Link Layer Discovery Protocol (LLDP) enabled.

[Impact] An unauthenticated, adjacent attacker can send crafted LLDP packets to trigger a denial of service (DoS) or execute arbitrary code with elevated privileges.

[Mitigation] Apply official Cisco software updates immediately, or disable LLDP globally/per-interface as a temporary workaround.

[Affected Scope] Cisco IOS and IOS XE Software with DHCP Option 82 encapsulation functionality enabled

[Impact] An unauthenticated, remote attacker can cause the affected device to reload, resulting in a complete Denial of Service (DoS) condition

[Mitigation] Apply the official software updates from Cisco, or disable DHCP Option 82 / relay features and restrict DHCP traffic using ACLs