Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco talos vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-0385
The Smart Install feature in Cisco IOS 12.2, 15.0, 15.1, and 15.2 allows remote malicious users to cause a denial of service (device reload) by sending a malformed Smart Install message over TCP, aka Bug ID CSCtt16051.
Cisco Ios 15.1Cisco Ios 12.2Cisco Ios 15.0Cisco Ios 15.2
7.5
CVSSv3
CVE-2016-1349
The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 up to and including 3.7 allows remote malicious users to cause a denial of service (device reload) via crafted image list parameters in a Smart Install packet, aka Bug ID CSCuv45410.
Cisco Ios Xe 3.3se 3.3.3seCisco Ios Xe 3.3se 3.3.2seCisco Ios Xe 3.4sg 3.4.3sgCisco Ios Xe 3.3xo 3.3.2xoCisco Ios Xe 3.7e 3.7.1eCisco Ios Xe 3.6e 3.6.2aeCisco Ios Xe 3.6e 3.6.1eCisco Ios Xe 3.6e 3.6.0eCisco Ios Xe 3.5e 3.5.3eCisco Ios Xe 3.3xo 3.3.1xoCisco Ios Xe 3.5e 3.5.0eCisco Ios Xe 3.2se 3.2.1seCisco Ios Xe 3.3xo 3.3.0xoCisco Ios 12.2\\\\\\(60\\\\\\)ez8Cisco Ios 12.2\\\\\\(60\\\\\\)ez7Cisco Ios 15.2\\\\\\(3\\\\\\)e1Cisco Ios 12.2\\\\\\(60\\\\\\)ez5Cisco Ios 12.2\\\\\\(60\\\\\\)ez4Cisco Ios 15.0\\\\\\(2\\\\\\)ej1Cisco Ios 15.2\\\\\\(1\\\\\\)e1Cisco Ios 15.0\\\\\\(2\\\\\\)ex4Cisco Ios 15.0\\\\\\(2\\\\\\)se5
6.5
CVSSv3
CVE-2015-7851
Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP prior to 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite ...
Ntp NtpNtp Ntp 4.2.8
7.5
CVSSv3
CVE-2016-6385
Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 up to and including 15.2 and IOS XE 3.2 up to and including 3.8 allows remote malicious users to cause a denial of service (memory consumption) via crafted image-list parameters, aka Bug ID CSCuy823...
Cisco Ios 12.2\\(54\\)seCisco Ios 12.2\\(44\\)eyCisco Ios 15.0\\(1\\)se1Cisco Ios 12.2\\(55\\)seCisco Ios Xe 3.3.4seCisco Ios 12.2\\(52\\)exCisco Ios 12.2\\(53\\)seCisco Ios 15.0\\(2\\)ebCisco Ios Xe 3.6.0eCisco Ios 15.2\\(3\\)e2Cisco Ios 12.2\\(53\\)exCisco Ios Xe 3.5.0eCisco Ios 15.1\\(2\\)sg7Cisco Ios 12.2\\(55\\)ezCisco Ios 15.2\\(1\\)e2Cisco Ios 12.2\\(50\\)se5Cisco Ios 12.2\\(46\\)eyCisco Ios 12.2\\(58\\)seCisco Ios Xe 3.5.2eCisco Ios 15.2\\(1\\)e3Cisco Ios 15.0\\(2\\)edCisco Ios 15.0\\(2a\\)se9
8.8
CVSSv3
CVE-2015-7849
Use-after-free vulnerability in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.
Ntp NtpNtp Ntp 4.2.8Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -
8.8
CVSSv3
CVE-2015-7854
Buffer overflow in the password management functionality in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.
Ntp NtpNtp Ntp 4.2.8Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -
7.5
CVSSv3
CVE-2015-7848
An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP dae...
Ntp Ntp-dev 4.3.70
9.8
CVSSv3
CVE-2015-7853
The datalen parameter in the refclock driver in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to execute arbitrary code or cause a denial of service (crash) via a negative input value.
Ntp NtpNtp Ntp 4.2.8Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -
NA
CVE-2013-1146
The Smart Install client functionality in Cisco IOS 12.2 and 15.0 up to and including 15.3 on Catalyst switches allows remote malicious users to cause a denial of service (device reload) via crafted image list parameters in Smart Install packets, aka Bug ID CSCub55790.
Cisco Ios 15.0\\(1\\)seCisco Ios 12.2Cisco Ios 15.2Cisco Ios 15.1Cisco Ios 15.0Cisco Ios 15.3
9.8
CVSSv3
CVE-2015-7705
The rate limiting feature in NTP 4.x prior to 4.2.8p4 and 4.3.x prior to 4.3.77 allows remote malicious users to have unspecified impact via a large number of crafted requests.
Ntp NtpNtp Ntp 4.2.8Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -Citrix Xenserver 6.0.2Citrix Xenserver 6.2.0Citrix Xenserver 6.5Citrix Xenserver 7.0Siemens Tim 4r-ie FirmwareSiemens Tim 4r-ie Dnp3 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook