CVE Vulnerability Advisory Database

[Affected Scope] Cisco IOS XR Software deployments with the Health Check RPM enabled

[Impact] Unauthenticated remote attackers can connect to the Redis instance inside the NOSi container, enabling them to write to the database, write arbitrary files to the container filesystem, and retrieve database information

[Mitigation] Apply official Cisco software updates, deactivate the unused Health Check RPM, or restrict access to TCP port 6379 using infrastructure ACLs

[Affected Scope] Cisco IOS XR Software with the Distance Vector Multicast Routing Protocol (DVMRP) feature enabled

[Impact] An unauthenticated, remote attacker can cause an immediate crash of the IGMP process or exhaust system memory, leading to instability in critical routing protocols and denial of service (DoS)

[Mitigation] Apply official Cisco software updates, disable DVMRP multicast routing where not required, or implement IGMP packet filtering ACLs

[Affected Scope] Cisco IOS XR Software with the Distance Vector Multicast Routing Protocol (DVMRP) feature enabled

[Impact] Unauthenticated, remote attackers can cause complete memory exhaustion, leading to instability or crash of critical routing protocols and system processes (Denial of Service)

[Mitigation] Apply official Cisco software updates immediately, or implement temporary workarounds such as infrastructure ACLs to rate-limit or block unauthorized IGMP traffic

[Affected Scope] Cisco network devices running Cisco IOS XR Software with Cisco Discovery Protocol (CDP) enabled

[Impact] An unauthenticated, adjacent attacker in the same Layer 2 broadcast domain can execute arbitrary code with administrative privileges or cause a denial of service (device reload)

[Mitigation] Apply official Cisco software patches immediately, or disable CDP globally/on untrusted interfaces as a temporary workaround

[Affected Scope] Cisco devices running Cisco IOS, IOS XE, or IOS XR Software with Link Layer Discovery Protocol (LLDP) enabled.

[Impact] An unauthenticated, adjacent attacker can send crafted LLDP packets to trigger a denial of service (DoS) or execute arbitrary code with elevated privileges.

[Mitigation] Apply official Cisco software updates immediately, or disable LLDP globally/per-interface as a temporary workaround.

[Affected Scope] Cisco IOS, IOS XE, and IOS XR Software with Link Layer Discovery Protocol (LLDP) enabled

[Impact] An unauthenticated, adjacent attacker could exploit this vulnerability to execute arbitrary code with elevated privileges or cause a denial of service (DoS) condition

[Mitigation] Apply official Cisco software updates or disable LLDP globally/per-interface as a temporary workaround

[Affected Scope] Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0

[Impact] Unauthenticated remote attackers can retrieve sensitive information from device memory (including private keys and configuration data) by sending crafted IKEv1 negotiation requests

[Mitigation] Upgrade affected device firmware to the latest patched releases, or restrict access to UDP ports 500 and 4500 using infrastructure ACLs to trusted peers only

[Affected Scope] Cisco IOS XR software versions 3.4.0 through 3.9.1 with the Border Gateway Protocol (BGP) routing process enabled.

[Impact] A remote attacker can trigger a denial of service (BGP peering session reset) by sending a specially crafted BGP prefix announcement, potentially disrupting global routing tables.

[Mitigation] Apply the official Cisco Software Maintenance Upgrade (SMU) or upgrade to a non-vulnerable release of Cisco IOS XR.

[Affected Scope] Cisco IOS XR Software versions 3.4.0 through 3.8.1 running on routing platforms

[Impact] Remote attackers can trigger a denial of service (BGP session reset) by sending a crafted BGP UPDATE message with an invalid attribute, leading to routing instability

[Mitigation] Apply official Cisco software patches or implement infrastructure ACLs and BGP TTL Security to restrict unauthorized BGP peer connections