CVE-2021-1465 | ByteOS Network

Vulnerability Details :

CVE-2021-1465

Assigner-cisco

Assigner Org ID-d1c1063e-7a18-46af-9102-31f8928bc633

Published At-18 Nov, 2024 | 15:26

Updated At-18 Nov, 2024 | 15:52

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a directory traversal attack and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to write arbitrary files on the affected system.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:cisco

Assigner Org ID:d1c1063e-7a18-46af-9102-31f8928bc633

Published At:18 Nov, 2024 | 15:26

Updated At:18 Nov, 2024 | 15:52

▼CVE Numbering Authority (CNA)

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a directory traversal attack and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to write arbitrary files on the affected system.

Affected Products

Vendor

Cisco Systems, Inc.

Product

Cisco Catalyst SD-WAN Manager

Versions

Affected

Problem Types

Type	CWE ID	Description
cwe	CWE-20	Improper Input Validation

Type: cwe

CWE ID: CWE-20

Description: Improper Input Validation

Metrics

Version	Base score	Base severity	Vector
3.1	4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Version: 3.1

Base score: 4.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploits

The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

References

Hyperlink	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-dir-trav-Bpwc5gtm	N/A

Hyperlink: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-dir-trav-Bpwc5gtm

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

Source:psirt@cisco.com

Published At:18 Nov, 2024 | 16:15

Updated At:04 Aug, 2025 | 14:33

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a directory traversal attack and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to write arbitrary files on the affected system.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 4.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CPE Matches

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>17.2.4

cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.4:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>17.2.5

cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.5:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>17.2.6

cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.6:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>17.2.7

cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.7:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>17.2.8

cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.8:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>17.2.9

cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.9:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>17.2.10

cpe:2.3:a:cisco:catalyst_sd-wan_manager:17.2.10:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.2.0

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.2.0:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.3.0

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.0:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.3.1

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.3.1.1

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.1.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.3.3

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.3:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.3.3.1

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.3.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.3.4

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.4:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.3.5

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.5:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.3.6.1

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.6.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.3.7

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.7:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.3.8

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.3.8:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.4.0

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.0:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.4.0.1

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.0.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.4.1

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.4.3

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.3:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.4.4

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.4:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.4.5

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.5:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.4.302

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.302:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>18.4.303

cpe:2.3:a:cisco:catalyst_sd-wan_manager:18.4.303:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>19.1.0

cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.1.0:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>19.2.0

cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.0:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>19.2.1

cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>19.2.2

cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.2:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>19.2.3

cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.3:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>19.2.31

cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.31:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>19.2.097

cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.097:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>19.2.099

cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.099:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>19.2.929

cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.2.929:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>19.3.0

cpe:2.3:a:cisco:catalyst_sd-wan_manager:19.3.0:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>20.1.1

cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.1.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>20.1.1.1

cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.1.1.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>catalyst_sd-wan_manager>>20.1.12

cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.1.12:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-20	Secondary	psirt@cisco.com
CWE-22	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Secondary

Source: psirt@cisco.com

CWE ID: CWE-22

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-dir-trav-Bpwc5gtm	psirt@cisco.com	Vendor Advisory

Hyperlink: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-dir-trav-Bpwc5gtm

Source: psirt@cisco.com

Resource:

Vendor Advisory

Similar CVEs

1508Records found

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.51% / 65.57%

||

7 Day CHG~0.00%

Published-19 Sep, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service (CPU consumption) by repeatedly accessing the account-validation component of an unspecified service, aka Bug ID CSCuy92704.

Vendor-n/a Cisco Systems, Inc.

Product-webex_meetings_server n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.74% / 72.04%

||

7 Day CHG~0.00%

Published-08 Aug, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

Cisco IOS 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service (interface wedge) by sending many crafted NTP packets, aka Bug ID CSCva35619.

Vendor-n/a Cisco Systems, Inc.

Product-ios n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.8||HIGH

EPSS-0.31% / 53.95%

||

7 Day CHG-0.02%

Published-04 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) allow local users to obtain root access via crafted CLI input, aka Bug ID CSCuy21892.

Vendor-n/a Cisco Systems, Inc.

Product-prime_virtual_network_analysis_module_software prime_network_analysis_module_software n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-8.8||HIGH

EPSS-0.26% / 48.98%

||

7 Day CHG~0.00%

Published-08 Aug, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

Cisco RV180 and RV180W devices allow remote authenticated users to execute arbitrary commands as root via a crafted HTTP request, aka Bug ID CSCuz48592.

Vendor-n/a Cisco Systems, Inc.

Product-rv180_vpn_router rv180_vpn_router_firmware rv180w_vpn_router_firmware rv180w_vpn_router n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.8||HIGH

EPSS-1.04% / 76.56%

||

7 Day CHG~0.00%

Published-16 May, 2008 | 06:54

Updated-07 Aug, 2024 | 08:32

The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic, aka Bug ID CSCsk46770.

Vendor-n/a Cisco Systems, Inc.

Product-unified_callmanager unified_communications_manager n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.46% / 63.40%

||

7 Day CHG~0.00%

Published-03 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco Prime Network Analysis Module (NAM) before 6.2(1-b) miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service (mond process crash and monitoring outage) via crafted IPv6 packets, aka Bug ID CSCuy37324.

Vendor-n/a Cisco Systems, Inc.

Product-network_analysis_module network_analysis_module_software n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-1.41% / 79.70%

||

7 Day CHG~0.00%

Published-02 Sep, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service (interface outage) via a crafted HTTP request, aka Bug ID CSCuz76238.

Vendor-n/a Cisco Systems, Inc.

Product-small_business_220_series_smart_plus_switches n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-5||MEDIUM

EPSS-0.57% / 67.78%

||

7 Day CHG~0.00%

Published-13 Jun, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

The anti-spam scanner on Cisco Email Security Appliance (ESA) devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remote attackers to bypass intended e-mail restrictions via a malformed DNS SPF record, aka Bug IDs CSCuu35853 and CSCuu37733.

Vendor-n/a Cisco Systems, Inc.

Product-email_security_appliance n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 41.06%

||

7 Day CHG~0.00%

Published-04 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug ID CSCuz03005.

Vendor-n/a Cisco Systems, Inc.

Product-ip_phone_8800_series_firmware n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.16% / 37.81%

||

7 Day CHG~0.00%

Published-23 Jun, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

The license-certificate upload functionality on Cisco 8800 phones with software 11.0(1) allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010.

Vendor-n/a Cisco Systems, Inc.

Product-ip_phone_8800_series_firmware ip_phone_8800 n/a

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.45% / 62.53%

||

7 Day CHG~0.00%

Published-03 Mar, 2016 | 22:00

Updated-12 Apr, 2025 | 10:46

The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (service outage) by leveraging certain intranet connectivity and sending a malformed HTTPS request, aka Bug ID CSCuu24840.

Vendor-n/a Cisco Systems, Inc.

Product-web_security_appliance n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.35% / 56.98%

||

7 Day CHG~0.00%

Published-30 Jan, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330.

Vendor-n/a Cisco Systems, Inc.

Product-sf500-48p 500_series_switch_firmware sg500-28 sg500-52 sf500-24p sg500-52mp sg500x-24 sg500x-48 sg500-52p sg500-28p sg500-28mpp sg500x-24p sg500x-48p sg500xg-8f8t sf500-48 sf500-24 n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.96% / 75.49%

||

7 Day CHG~0.00%

Published-08 Aug, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

Directory traversal vulnerability in the web interface on Cisco RV180 and RV180W devices allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuz43023.

Vendor-n/a Cisco Systems, Inc.

Product-rv180_vpn_router rv180_vpn_router_firmware rv180w_wireless-n_multifunction_vpn_router_firmware rv180w_wireless-n_multifunction_vpn_router n/a

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-8.8||HIGH

EPSS-0.98% / 75.88%

||

7 Day CHG~0.00%

Published-18 Aug, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507.

Vendor-n/a Cisco Systems, Inc.

Product-application_policy_infrastructure_controller_enterprise_module n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-8.8||HIGH

EPSS-0.35% / 56.77%

||

7 Day CHG+0.08%

Published-02 Jul, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote authenticated users to execute arbitrary commands or upload files via a crafted HTTP request, aka Bug ID CSCuz01488.

Vendor-n/a Cisco Systems, Inc.

Product-prime_infrastructure evolved_programmable_network_manager n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-31.81% / 96.66%

||

7 Day CHG~0.00%

Published-03 Jul, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

goform/Docsis_system on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long LanguageSelect parameter, related to a "Gateway HTTP Corruption Denial of Service" issue, aka Bug ID CSCuy28100.

Vendor-n/a Cisco Systems, Inc.

Product-epc3928 epc3928_firmware n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.8||HIGH

EPSS-1.92% / 82.59%

||

7 Day CHG~0.00%

Published-16 May, 2008 | 06:54

Updated-07 Aug, 2024 | 08:32

Cisco Unified Communications Manager (CUCM) 5.x before 5.1(2) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (service interruption) via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115.

Vendor-n/a Cisco Systems, Inc.

Product-unified_communications_manager n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.8||HIGH

EPSS-1.92% / 82.59%

||

7 Day CHG~0.00%

Published-16 May, 2008 | 06:54

Updated-07 Aug, 2024 | 08:32

The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via an unspecified "stress test," aka Bug ID CSCsh20972.

Vendor-n/a Cisco Systems, Inc.

Product-unified_presence n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.98% / 75.83%

||

7 Day CHG~0.00%

Published-01 Aug, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco AsyncOS on Email Security Appliance (ESA) devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932.

Vendor-n/a Cisco Systems, Inc.

Product-email_security_appliance asyncos n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.17% / 38.67%

||

7 Day CHG~0.00%

Published-07 Jul, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 and Expressway X8.1 through X8.6 mishandles certificates, which allows remote attackers to bypass authentication via an arbitrary trusted certificate, aka Bug ID CSCuz64601.

Vendor-n/a Cisco Systems, Inc.

Product-telepresence_video_communication_server_software telepresence_video_communication_server n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.25% / 47.77%

||

7 Day CHG~0.00%

Published-23 Aug, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco WebEx Meetings Server 2.6 allows remote attackers to bypass intended access restrictions and obtain sensitive application information via unspecified vectors, aka Bug ID CSCuy92724.

Vendor-n/a Cisco Systems, Inc.

Product-webex_meetings_server n/a

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.68% / 70.66%

||

7 Day CHG~0.00%

Published-22 Aug, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Cisco IP Phone 8800 devices with software 11.0(1) allow remote attackers to cause a denial of service (memory corruption) via a crafted HTTP request, aka Bug ID CSCuz03038.

Vendor-n/a Cisco Systems, Inc.

Product-ip_phone_8800_series_firmware ip_phone_8800 n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.72% / 71.58%

||

7 Day CHG-0.59%

Published-25 May, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via a crafted URI in a SIP header, aka Bug ID CSCuy43258.

Vendor-n/a Cisco Systems, Inc.

Product-telepresence_video_communication_server n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-9.8||CRITICAL

EPSS-2.32% / 84.17%

||

7 Day CHG~0.00%

Published-06 Apr, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.

Vendor-n/a Sun Microsystems (Oracle Corporation)Cisco Systems, Inc.

Product-prime_infrastructure opensolaris evolved_programmable_network_manager n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.49% / 64.48%

||

7 Day CHG~0.00%

Published-01 Apr, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bug ID CSCux22726.

Vendor-n/a Cisco Systems, Inc.

Product-firesight_system_software asa_with_firepower_services n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-8.1||HIGH

EPSS-0.57% / 67.77%

||

7 Day CHG~0.00%

Published-10 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco Access Point devices with software 8.2(102.43) allow remote attackers to cause a denial of service (device reload) via crafted ARP packets, aka Bug ID CSCuy55803.

Vendor-n/a Cisco Systems, Inc.

Product-aironet_access_point_software aironet n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.19% / 41.28%

||

7 Day CHG~0.00%

Published-25 May, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco AsyncOS 8.0 before 8.0.6-119 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (proxy-process hang) via a crafted HTTP POST request, aka Bug ID CSCuo12171.

Vendor-n/a Cisco Systems, Inc.

Product-web_security_appliance n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Apache Software Foundation

Matching Score-6

Assigner-Apache Software Foundation

CVSS Score-10||CRITICAL

EPSS-94.36% / 99.96%

||

7 Day CHG~0.00%

Published-10 Dec, 2021 | 00:00

Updated-08 Aug, 2025 | 18:52

Known KEV||Action Due Date - 2021-12-24||For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Vendor-percussion snowsoftware Apple Inc.The Apache Software Foundation Fedora Project Cisco Systems, Inc.Siemens AG Intel Corporation NetApp, Inc.Bentley Systems, Incorporated SonicWall Inc.Debian GNU/Linux

Product-common_services_platform_collector solidfire_enterprise_sds oncommand_insight datacenter_manager active_iq_unified_manager operation_scheduler connected_analytics_for_network_deployment industrial_edge_management_hub snapcenter integrated_management_controller_supervisor firepower_1150 iot_operations_dashboard wan_automation_engine firepower_2140 system_studio virtualized_voice_browser firepower_2110 dna_center solid_edge_cam_pro 6bk1602-0aa42-0tp0 energyip comos secure_device_onboard firepower_4120 sppa-t3000_ses3000_firmware siveillance_viewpoint firepower_1120 genomics_kernel_library contact_center_domain_manager crosswork_data_gateway xpedition_package_integrator network_dashboard_fabric_controller 6bk1602-0aa22-0tp0_firmware cloud_secure_agent nexus_insights 6bk1602-0aa22-0tp0 firepower_1010 6bk1602-0aa32-0tp0 email_security unified_contact_center_management_portal opcenter_intelligence xcode dna_spaces_connector finesse solidfire_\&_hci_storage_node packaged_contact_center_enterprise unified_sip_proxy cloudcenter_suite ucs_director energy_engage fxos customer_experience_cloud_agent paging_server logo\!_soft_comfort firepower_2130 siveillance_control_pro spectrum_power_7 cloud_manager network_insights_for_data_center synchro_4d 6bk1602-0aa52-0tp0 solid_edge_harness_design fog_director network_assurance_engine firepower_4115 nexus_dashboard smart_phy business_process_automation 6bk1602-0aa42-0tp0_firmware broadworks firepower_4140 emergency_responder ucs_central computer_vision_annotation_tool video_surveillance_manager connected_mobile_experiences synchro head-end_system_universal_device_integration_system sentron_powermanager fedora cloudcenter_cost_optimizer 6bk1602-0aa12-0tp0_firmware spectrum_power_4 cloudcenter vm_access_proxy cloudcenter_suite_admin oneapi_sample_browser 6bk1602-0aa52-0tp0_firmware firepower_4150 virtual_topology_system firepower_9300 prime_service_catalog brocade_san_navigator enterprise_chat_and_email cloud_connect firepower_4145 teamcenter unified_customer_voice_portal cloud_insights rhythmyx firepower_1140 sipass_integrated siveillance_vantage intersight_virtual_appliance sd-wan_vmanage ucs_central_software contact_center_management_portal webex_meetings_server unified_intelligence_center unified_workforce_optimization energyip_prepay crosswork_zero_touch_provisioning cx_cloud_agent 6bk1602-0aa12-0tp0 unity_connection cloudcenter_workload_manager optical_network_controller virtualized_infrastructure_manager video_surveillance_operations_manager 6bk1602-0aa32-0tp0_firmware unified_communications_manager advanced_malware_protection_virtual_private_cloud_appliance identity_services_engine snow_commander cyber_vision_sensor_management_extension firepower_4112 unified_contact_center_enterprise debian_linux unified_computing_system unified_contact_center_express xpedition_enterprise log4j desigo_cc_advanced_reports ontap_tools unified_communications_manager_im_and_presence_service firepower_2120 mobility_services_engine crosswork_network_automation dna_spaces vesys automated_subsea_tuning cyber_vision siveillance_command evolved_programmable_network_manager dna_spaces\firepower_4110 mendix firepower_4125 sppa-t3000_ses3000 unified_communications_manager_im_\&_presence_service e-car_operation_center nx industrial_edge_management workload_optimization_manager firepower_threat_defense navigator capital crosswork_platform_infrastructure network_services_orchestrator data_center_network_manager crosswork_optimization_engine mindsphere siguard_dsa gma-manager desigo_cc_info_center crosswork_network_controller siveillance_identity Apache Log4j2 Log4j2

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-502

Deserialization of Untrusted Data

CWE ID-CWE-917

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.8||HIGH

EPSS-0.31% / 53.95%

||

7 Day CHG-0.02%

Published-08 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root access via crafted CLI command parameters, aka Bug ID CSCuy64037.

Vendor-n/a Cisco Systems, Inc.

Product-aironet_3800 aironet_1850e aironet_1850i aironet_1830e aironet_1830i aironet_access_point_software_aironet_2800 n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.72% / 71.58%

||

7 Day CHG-0.59%

Published-25 May, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote attackers to cause a denial of service (session drop) by making many connection attempts to open TCP ports, aka Bug ID CSCux95576.

Vendor-n/a Cisco Systems, Inc.

Product-ios_xr asr_9904 asr_9922 asr_9001 asr_9006 asr_9010 asr_9912 n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.38% / 58.82%

||

7 Day CHG~0.00%

Published-23 Jun, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

Cisco AsyncOS 9.7.0-125 on Email Security Appliance (ESA) devices allows remote attackers to bypass intended spam filtering via crafted executable content in a ZIP archive, aka Bug ID CSCuy39210.

Vendor-n/a Cisco Systems, Inc.

Product-email_security_appliance_firmware asyncos n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.48% / 64.28%

||

7 Day CHG~0.00%

Published-12 Apr, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Cisco IOS XR 4.2.3, 4.3.0, 4.3.4, and 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (CRC and symbol errors, and interface flap) via crafted bit patterns in packets, aka Bug ID CSCuv78548.

Vendor-n/a Cisco Systems, Inc.

Product-ios_xr n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-8.8||HIGH

EPSS-0.59% / 68.12%

||

7 Day CHG-0.02%

Published-04 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21889.

Vendor-n/a Cisco Systems, Inc.

Product-prime_virtual_network_analysis_module_software prime_network_analysis_module_software n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-8.2||HIGH

EPSS-0.21% / 43.74%

||

7 Day CHG~0.00%

Published-03 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco Cloud Network Automation Provisioner (CNAP) 1.0(0) in Cisco Configuration Assistant (CCA) allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls, aka Bug ID CSCuy77145.

Vendor-n/a Cisco Systems, Inc.

Product-cloud_network_automation_provisioner n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-0.49% / 64.37%

||

7 Day CHG-0.76%

Published-25 May, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco AsyncOS before 8.5.3-069 and 8.6 through 8.8 on Web Security Appliance (WSA) devices mishandles memory allocation for HTTP requests, which allows remote attackers to cause a denial of service (proxy-process reload) via a crafted request, aka Bug ID CSCuu02529.

Vendor-n/a Cisco Systems, Inc.

Product-web_security_appliance web_security_appliance_\(wsa\)n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-1.83% / 82.18%

||

7 Day CHG~0.00%

Published-26 Mar, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload) via a crafted header in a packet, aka Bug ID CSCuu64279.

Vendor-n/a Cisco Systems, Inc.

Product-ios nx-os n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.5||HIGH

EPSS-23.20% / 95.72%

||

7 Day CHG~0.00%

Published-03 Jul, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

goform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long h_sortWireless parameter, related to a "Gateway Client List Denial of Service" issue, aka Bug ID CSCux24948.

Vendor-n/a Cisco Systems, Inc.

Product-epc3928 epc3928_firmware n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-8.8||HIGH

EPSS-0.51% / 65.30%

||

7 Day CHG~0.00%

Published-03 Mar, 2016 | 22:00

Updated-12 Apr, 2025 | 10:46

Cisco Prime Infrastructure 3.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP request that is mishandled during viewing of a log file, aka Bug ID CSCuw81494.

Vendor-n/a Cisco Systems, Inc.

Product-prime_infrastructure n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-6.5||MEDIUM

EPSS-1.40% / 79.67%

||

7 Day CHG~0.00%

Published-06 Oct, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device reload) by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and CSCux11417.

Vendor-n/a Cisco Systems, Inc.

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-10||HIGH

EPSS-9.41% / 92.47%

||

7 Day CHG~0.00%

Published-14 Mar, 2008 | 20:00

Updated-07 Aug, 2024 | 08:08

Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands.

Vendor-n/a Cisco Systems, Inc.

Product-ciscoworks_internetwork_performance_monitor n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.8||HIGH

EPSS-1.92% / 82.59%

||

7 Day CHG~0.00%

Published-16 May, 2008 | 06:54

Updated-07 Aug, 2024 | 08:08

The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via malformed packets, aka Bug ID CSCsh50164.

Vendor-n/a Cisco Systems, Inc.

Product-unified_presence_server unified_presence n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.48% / 64.19%

||

7 Day CHG~0.00%

Published-04 Nov, 2021 | 15:35

Updated-07 Nov, 2024 | 21:43

Cisco Small Business RV Series Routers Command Injection Vulnerability

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system and execute them using root-level privileges. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious input to a specific field in the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system as a user with root-level privileges.

Vendor-Cisco Systems, Inc.

Product-rv325 application_extension_platform rv320 rv042 rv042g rv082 rv016 ios_xr Cisco Small Business RV Series Router Firmware

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-5||MEDIUM

EPSS-0.21% / 43.83%

||

7 Day CHG~0.00%

Published-22 Aug, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

The Internet Access Point Protocol (IAPP) module on Cisco Wireless LAN Controller (WLC) devices with software 8.1(104.37) allows remote attackers to trigger incorrect traffic forwarding via crafted IPv6 packets, aka Bug ID CSCuv40033.

Vendor-n/a Cisco Systems, Inc.

Product-wireless_lan_controller_software n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.8||HIGH

EPSS-0.41% / 60.57%

||

7 Day CHG~0.00%

Published-25 Sep, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service (device reload) via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933.

Vendor-n/a Cisco Systems, Inc.

Product-ios_xe n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-4.9||MEDIUM

EPSS-0.10% / 27.75%

||

7 Day CHG~0.00%

Published-19 Nov, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

The USB driver in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows physically proximate attackers to cause a denial of service via a crafted USB device that triggers invalid USB commands, aka Bug ID CSCux10531.

Vendor-n/a Cisco Systems, Inc.

Product-firepower_extensible_operating_system n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.08% / 25.15%

||

7 Day CHG~0.00%

Published-19 Feb, 2013 | 23:00

Updated-11 Apr, 2025 | 00:51

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Network Services Manager does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCue46001, CSCud95790, CSCue46021, CSCue46025, CSCue46023, CSCue46058, CSCue46013, CSCue46031, CSCue46035, and CSCue46042.

Vendor-n/a Cisco Systems, Inc.

Product-prime_lan_management_solution network_services_manager secure_access_control_system quad prime_network_control_system application_networking_manager prime_collaboration context_directory_agent identity_services_engine_software unified_provisioning_manager n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-9.4||HIGH

EPSS-1.06% / 76.75%

||

7 Day CHG~0.00%

Published-04 Sep, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1 allows remote attackers to write to arbitrary files via crafted HTTP requests, aka Bug IDs CSCus36435 and CSCus62625.

Vendor-n/a Cisco Systems, Inc.

Product-integrated_management_controller_supervisor unified_computing_system_director n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.2||HIGH

EPSS-0.11% / 30.28%

||

7 Day CHG~0.00%

Published-18 Dec, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Cisco Prime Network Services Controller 3.0 allows local users to bypass intended access restrictions and execute arbitrary commands via additional parameters to an unspecified command, aka Bug ID CSCus99427.

Vendor-n/a Cisco Systems, Inc.

Product-prime_network_services_controller n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-7.8||HIGH

EPSS-0.58% / 67.94%

||

7 Day CHG~0.00%

Published-28 Sep, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S allows remote attackers to cause a denial of service (device reload) via a malformed ND packet with the Cryptographically Generated Address (CGA) option, aka Bug ID CSCuo04400.

Vendor-n/a Cisco Systems, Inc.

Product-ios ios_xe n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Cisco Systems, Inc.

Matching Score-6

Assigner-Cisco Systems, Inc.

CVSS Score-6.8||MEDIUM

EPSS-5.93% / 90.28%

||

7 Day CHG~0.00%

Published-18 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid package, and consequently execute arbitrary code, via a crafted certificate, aka Bug ID CSCuw06444.

Vendor-n/a Cisco Systems, Inc.

Product-firesight_system_software n/a

CWE ID-CWE-20

Improper Input Validation