CVE Vulnerability Advisory Database

[Affected Scope] Cisco IOS XR Software deployments with the Health Check RPM enabled

[Impact] Unauthenticated remote attackers can connect to the Redis instance inside the NOSi container, enabling them to write to the database, write arbitrary files to the container filesystem, and retrieve database information

[Mitigation] Apply official Cisco software updates, deactivate the unused Health Check RPM, or restrict access to TCP port 6379 using infrastructure ACLs

[Affected Scope] Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0

[Impact] Unauthenticated remote attackers can retrieve sensitive information from device memory (including private keys and configuration data) by sending crafted IKEv1 negotiation requests

[Mitigation] Upgrade affected device firmware to the latest patched releases, or restrict access to UDP ports 500 and 4500 using infrastructure ACLs to trusted peers only

[Affected Scope] Cisco IOS XR software versions 3.4.0 through 3.9.1 with the Border Gateway Protocol (BGP) routing process enabled.

[Impact] A remote attacker can trigger a denial of service (BGP peering session reset) by sending a specially crafted BGP prefix announcement, potentially disrupting global routing tables.

[Mitigation] Apply the official Cisco Software Maintenance Upgrade (SMU) or upgrade to a non-vulnerable release of Cisco IOS XR.

[Affected Scope] Cisco IOS XR Software versions 3.4.0 through 3.8.1 running on routing platforms

[Impact] Remote attackers can trigger a denial of service (BGP session reset) by sending a crafted BGP UPDATE message with an invalid attribute, leading to routing instability

[Mitigation] Apply official Cisco software patches or implement infrastructure ACLs and BGP TTL Security to restrict unauthorized BGP peer connections