CVE Vulnerability Advisory Database

[Affected Scope] Cisco devices running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later with Login Enhancements (Login Block) enabled

[Impact] An unauthenticated, remote attacker can trigger an unexpected system reload, leading to a complete Denial of Service (DoS) condition

[Mitigation] Apply the official Cisco IOS software updates, or temporarily disable the 'login block-for' feature and restrict virtual terminal (vty) access using infrastructure ACLs

[Affected Scope] Cisco devices running Cisco IOS Software Releases 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later with Login Enhancements (Login Block) enabled

[Impact] An unauthenticated, remote attacker can trigger an unexpected system reload, leading to a persistent Denial of Service (DoS) condition

[Mitigation] Upgrade to the latest patched Cisco IOS software release or temporarily disable/modify the Login Block configuration

[Affected Scope] Cisco Catalyst 2960-L Series, Catalyst Digital Building Series 8P, and 8U Switches running vulnerable Cisco IOS and configured with SNMPv2 or SNMPv3.

[Impact] An authenticated remote attacker can trigger a device reload (Denial of Service) via a SYS-3-CPUHOG error by sending a crafted SNMP GET request for the ciscoFlashMIB OID.

[Mitigation] Apply the official Cisco IOS software updates, or implement SNMP MIB views to exclude access to the ciscoFlashMIB OID and restrict SNMP access using ACLs.

[Affected Scope] Cisco switches running Cisco IOS or IOS XE Software with the Smart Install client feature enabled

[Impact] Unauthenticated, remote attackers can trigger an unexpected device reload, leading to a persistent Denial of Service (DoS) condition

[Mitigation] Disable the Smart Install feature using the 'no vstack' command, or restrict access to TCP port 4786 using infrastructure ACLs

[Affected Scope] Cisco router devices running Cisco IOS Software equipped with the Integrated Services Module for VPN (ISM-VPN).

[Impact] An unauthenticated, remote attacker can cause a complete Denial of Service (DoS) condition, hanging or crashing the device by sending crafted VPN traffic.

[Mitigation] Apply the official Cisco IOS software updates immediately and restrict unauthorized VPN traffic using Access Control Lists (ACLs).

[Affected Scope] Cisco Catalyst 6800 Series Switches running Cisco IOS 15.0 through 15.4, equipped with Supervisor Engine 6T and C6800-16P10G or C6800-16P10G-XL line cards configured as core-facing MPLS interfaces with VPLS enabled.

[Impact] An unauthenticated, adjacent attacker can flood the device with VPLS-generated MAC entries, causing the affected line card to crash and resulting in a complete Denial of Service (DoS) condition.

[Mitigation] Upgrade to a fixed Cisco IOS software release addressing Cisco Bug ID CSCva61927, or implement MAC address learning limits on VPLS VFIs as a temporary workaround.

[Affected Scope] Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 with ISAKMP enabled

[Impact] Unauthenticated, remote attackers can trigger high CPU utilization, traceback messages, or device reloads (DoS) by sending crafted IKEv2 packets

[Mitigation] Apply official Cisco software patches immediately, or restrict UDP 500/4500 traffic at the network boundary using Infrastructure ACLs (iACLs).

[Affected Scope] Cisco Integrated Services Routers Generation 2 (ISR G2) running Cisco IOS Software versions 15.0 through 15.6.

[Impact] An unauthenticated, adjacent attacker can cause the affected device to reload, leading to a complete Denial of Service (DoS) condition.

[Mitigation] Apply the official Cisco IOS software updates or implement Layer 2 security controls to restrict unauthorized adjacent traffic.

[Affected Scope] Systems running unpatched versions impacted by CVE-2017-12231

[Impact] A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unaut...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Cisco IOS 15.1, 15.2, 15.4 and IOS XE versions 3.14 through 3.18.

[Impact] An unauthenticated, remote attacker can send UDP packets with a destination port of 0 to cause an interface queue wedge, leading to a complete Denial of Service (DoS) condition.

[Mitigation] Upgrade to the latest recommended Cisco IOS/IOS XE software releases, or implement Infrastructure Access Control Lists (iACLs) to drop UDP packets targeting destination port 0.

[Affected Scope] Cisco network devices running Cisco IOS or IOS XE Software with the Autonomic Networking feature enabled (specifically Denali-16.2.1, Denali-16.3.1)

[Impact] An unauthenticated, adjacent attacker can cause affected autonomic nodes to reload, leading to a complete Denial of Service (DoS) condition

[Mitigation] Apply official Cisco software updates or disable the Autonomic Networking Infrastructure (ANI) feature if not required

[Affected Scope] Microsoft Internet Explorer 6, 6 SP1, and 7.

[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by enticing them to visit a specially crafted webpage.

[Mitigation] Apply the official Microsoft security updates, or implement workarounds such as setting the ActiveX Kill-Bit for the affected CLSID.