asr_1000 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/asr_1000/ Sun, 26 Feb 2023 06:41:11 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png asr_1000 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/asr_1000/ 32 32 CVE-2020-3508 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3508/ Sun, 26 Feb 2023 06:41:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3508/ A vulnerability in the IP Address Resolution Protocol (ARP) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded Services Processor (ESP) installed could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service condition. The vulnerability is due […]

The post CVE-2020-3508 appeared first on CVE Vulnerability.

]]> A vulnerability in the IP Address Resolution Protocol (ARP) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded Services Processor (ESP) installed could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service condition. The vulnerability is due to insufficient error handling when an affected device has reached platform limitations. An attacker could exploit this vulnerability by sending a malicious series of IP ARP messages to an affected device. A successful exploit could allow the attacker to exhaust system resources, which would eventually cause the affected device to reload.

The post CVE-2020-3508 appeared first on CVE Vulnerability.

]]> CVE-2019-12654 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-12654/ Sun, 26 Feb 2023 06:29:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-12654/ A vulnerability in the common Session Initiation Protocol (SIP) library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient sanity checks on an internal data structure. An attacker could […]

The post CVE-2019-12654 appeared first on CVE Vulnerability.

]]> A vulnerability in the common Session Initiation Protocol (SIP) library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient sanity checks on an internal data structure. An attacker could exploit this vulnerability by sending a sequence of malicious SIP messages to an affected device. An exploit could allow the attacker to cause a NULL pointer dereference, resulting in a crash of the iosd process. This triggers a reload of the device.

The post CVE-2019-12654 appeared first on CVE Vulnerability.

]]> CVE-2021-1371 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-1371/ Thu, 23 Feb 2023 14:06:27 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-1371/ A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when the device is in the default SD-WAN configuration. This vulnerability occurs because the default configuration is applied for console authentication and authorization. An […]

The post CVE-2021-1371 appeared first on CVE Vulnerability.

]]> A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when the device is in the default SD-WAN configuration. This vulnerability occurs because the default configuration is applied for console authentication and authorization. An attacker could exploit this vulnerability by connecting to the console port and authenticating as a read-only user. A successful exploit could allow a user with read-only permissions to access administrative privileges.

The post CVE-2021-1371 appeared first on CVE Vulnerability.

]]>