Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco asr 1002 - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-6383
Cisco IOS XE 15.4(3)S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130.
Cisco Ios Xe 15.4\\(3\\)s
4.6
CVSSv3
CVE-2023-20064
A vulnerability in the GRand Unified Bootloader (GRUB) for Cisco IOS XR Software could allow an unauthenticated attacker with physical access to the device to view sensitive files on the console using the GRUB bootloader command line. This vulnerability is due to the inclusion of...
Cisco Ios Xr
6.7
CVSSv3
CVE-2019-1649
A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local malicious user to write a modified firmware image to the component. This vulnerability affects mul...
Cisco Asa 5500 FirmwareCisco Firepower 2100 FirmwareCisco Firepower 4000 FirmwareCisco Firepower 9000 FirmwareCisco Ons 15454 Mstp FirmwareCisco Analog Voice Network Interface Modules FirmwareCisco Integrated Services Router T1\\/e1 Voice And Wan Network Interface Modules FirmwareCisco Supervisor A\\+ FirmwareCisco Supervisor B\\+ FirmwareCisco 15454-m-wse-k9 FirmwareCisco Ios XeCisco IosCisco Industrial Security Appliances 3000 FirmwareCisco Integrated Services Router 4200 FirmwareCisco Integrated Services Router 4300 FirmwareCisco Integrated Services Router 4400 FirmwareCisco Asr 1000 Series FirmwareCisco Asr 1001 Firmware 16.0.0Cisco Ios Xr 7.0.1Cisco Catalyst 9800-40 Wireless Controller Firmware -Cisco Catalyst 9800-80 Wireless Controller Firmware -Cisco Ic3000-k9 Firmware
8.6
CVSSv3
CVE-2018-0472
A vulnerability in the IPsec driver code of multiple Cisco IOS XE Software platforms and the Cisco ASA 5500-X Series Adaptive Security Appliance (ASA) could allow an unauthenticated, remote malicious user to cause the device to reload. The vulnerability is due to improper process...
Cisco Ios Xe 16.8.1Cisco Ios Xe 15.5\\(3\\)s5.36
6.4
CVSSv3
CVE-2018-3615
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
Intel Core I3 6006uIntel Core I3 6098pIntel Core I3 6102eIntel Core I3 6157uIntel Core I5 661Intel Core I5 670Intel Core I5 6300uIntel Core I5 6350hqIntel Core I5 6442eqIntel Core I5 6500Intel Core I5 6500tIntel Core I7 610eIntel Core I7 620leIntel Core I7 640umIntel Core I7 660lmIntel Core I3 6100hIntel Core I3 6100tIntel Core I3 6320Intel Core I5 650Intel Core I3 6100teIntel Core I3 6100uIntel Core I5 655k
7.5
CVSSv3
CVE-2022-20678
A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of certain TCP segm...
Cisco Ios Xe 16.9.6Cisco Ios Xe 16.12.4Cisco Ios Xe 16.12.5Cisco Ios Xe 17.3.3
5.6
CVSSv3
CVE-2018-3640
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Var...
Intel Pentium J J4205Intel Celeron N N3450Intel Atom Z Z2560Intel Atom Z Z2580Intel Atom Z Z3590Intel Atom Z Z3735dIntel Atom Z Z3740dIntel Atom Z Z3745Intel Atom Z Z3795Intel Atom Z Z2420Intel Atom C C3338Intel Atom C C3508Intel Atom C C3830Intel Atom C C3850Intel Xeon Silver 4110Intel Xeon Silver 4112Intel Xeon Platinum 8160Intel Xeon Platinum 8160fIntel Xeon Platinum 8176Intel Xeon Platinum 8176fIntel Xeon Gold 85120Intel Pentium Silver J5005
5.6
CVSSv3
CVE-2017-5754
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
Intel Pentium N N3700Intel Pentium N N3710Intel Celeron N N3000Intel Celeron N N3010Intel Celeron N N3050Intel Celeron N N2930Intel Celeron N N2920Intel Celeron N N2808Intel Celeron N N2807Intel Celeron J J3060Intel Celeron J J1900Intel Atom X3 C3295rkIntel Atom X3 C3235rkIntel Atom Z Z3775dIntel Atom Z Z3775Intel Atom Z Z3736fIntel Atom Z Z3735gIntel Atom Z Z3560Intel Atom Z Z3530Intel Atom Z Z2480Intel Atom Z Z2460Intel Atom C C3308
5.6
CVSSv3
CVE-2017-5715
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Intel Atom C C2308Intel Atom C C2316Intel Atom C C2338Intel Atom C C2350Intel Atom C C2358Intel Atom C C2508Intel Atom C C2516Intel Atom C C2518Intel Atom C C2530Intel Atom C C2538Intel Atom C C2550Intel Atom C C2558Intel Atom C C2718Intel Atom C C2730Intel Atom C C2738Intel Atom C C2750Intel Atom C C2758Intel Atom C C3308Intel Atom C C3338Intel Atom C C3508Intel Atom C C3538Intel Atom C C3558
5.6
CVSSv3
CVE-2017-5753
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Intel Atom C C2308Intel Atom C C2316Intel Atom C C2338Intel Atom C C2350Intel Atom C C2358Intel Atom C C2508Intel Atom C C2516Intel Atom C C2518Intel Atom C C2530Intel Atom C C2538Intel Atom C C2550Intel Atom C C2558Intel Atom C C2718Intel Atom C C2730Intel Atom C C2738Intel Atom C C2750Intel Atom C C2758Intel Atom C C3308Intel Atom C C3338Intel Atom C C3508Intel Atom C C3538Intel Atom C C3558
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook