Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6356 State: PUBLISHED Published: 2015-11-04T02:00:00 Last Updated: 2024-08-06T07:22:20.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WeChat page in Cisco Social Miner 10.0(1) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuw60212. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034048 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151103-csm
CVE ID: CVE-2015-6357 State: PUBLISHED Published: 2015-11-18T11:00:00 Last Updated: 2024-08-06T07:22:20.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid package, and consequently execute arbitrary code, via a crafted certificate, aka Bug ID CSCuw06444. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034161 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cis
: - http://www.securitytracker.com/id/1034161 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151116-fmc - http://packetstormsecurity.com/files/134390/Cisco-FireSIGHT-Management-Center-Certificate-Validation.html - http://wadofstuff.blogspot.com.au/2015/11/cve-2015-6357-firepwner-exploit-for.html - http://www.securityfocus.com/archive/1/536913/100/0/threaded - http://seclists.org/fulldisclosure/2015/Nov/79
CVE ID: CVE-2015-6358 State: PUBLISHED Published: 2017-10-12T15:00:00 Last Updated: 2024-08-06T07:22:20.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637, CSCuw46654, CSCuw46665, CSCuw46672, CSCuw46677, CSCuw46682, CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869,
CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869, CSCuw90875, CSCuw90881, CSCuw90899, and CSCuw90913. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/566724 - http://www.securitytracker.com/id/1034258 - http://www.securityfocus.com/bid/78047 - http://www.securitytracker.com/id/1034255 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151125-ci - http://www.securitytracker.com/id/1034257 - http://www.securitytracker.com/id/1034256
CVE ID: CVE-2015-6359 State: PUBLISHED Published: 2015-12-15T02:00:00 Last Updated: 2024-08-06T07:22:20.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS 15.3(3)S0.1 on ASR devices mishandles internal tables, which allows remote attackers to cause a denial of service (memory consumption or device crash) via a flood of crafted ND messages, aka Bug ID CSCup28217. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151214-ios - http://www.securityfocus.com/bid/79200 - http://www.securitytracker.com/id/103443
curityAdvisory/cisco-sa-20151214-ios - http://www.securityfocus.com/bid/79200 - http://www.securitytracker.com/id/1034432
CVE ID: CVE-2015-6360 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-08-06T07:22:21.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035650 - http://www.securitytracker.com/id/1035649 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-libsrtp - http://www.debian.org/security/2016/dsa-3539 - http://www.securitytracker.com/id/1035651 - http://www.secu
420-libsrtp - http://www.debian.org/security/2016/dsa-3539 - http://www.securitytracker.com/id/1035651 - http://www.securitytracker.com/id/1035636 - http://www.securitytracker.com/id/1035648 - http://www.securitytracker.com/id/1035652 - http://www.securitytracker.com/id/1035637
CVE ID: CVE-2015-6361 State: PUBLISHED Published: 2015-12-13T02:00:00 Last Updated: 2024-08-06T07:22:20.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface on Cisco DPC3939 (XB3) devices with firmware 121109aCMCST allows remote authenticated users to execute arbitrary commands via unspecified fields, aka Bug ID CSCuw86170. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151208-xb3
CVE ID: CVE-2015-6362 State: PUBLISHED Published: 2015-11-10T02:00:00 Last Updated: 2024-08-06T07:22:20.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151109-cg-nms - http://www.securitytracker.com/id/1034106
CVE ID: CVE-2015-6363 State: PUBLISHED Published: 2015-11-12T02:00:00 Last Updated: 2024-08-06T07:22:20.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco FireSIGHT Management Center (MC) 5.4.1.4 and 6.0.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuw88396. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034138 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151111-fmc
CVE ID: CVE-2015-6364 State: PUBLISHED Published: 2015-11-14T02:00:00 Last Updated: 2024-08-06T07:22:20.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager allows remote attackers to obtain sensitive information via crafted URLs in REST API requests, aka Bug ID CSCuv86960. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151112-vds - http://www.securitytracker.com/id/1034159
CVE ID: CVE-2015-6365 State: PUBLISHED Published: 2015-11-14T02:00:00 Last Updated: 2024-08-06T07:22:21.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.2(04)M and 15.4(03)M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151112-ios1 - http://www.securitytracker.com/id/1034158
CVE ID: CVE-2015-6366 State: PUBLISHED Published: 2015-11-13T02:00:00 Last Updated: 2024-08-06T07:22:20.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.2(04)M6 and 15.4(03)S lets physical-interface ACLs supersede tunnel-interface ACLs, which allows remote attackers to bypass intended network-traffic restrictions in opportunistic circumstances by using a tunnel, aka Bug ID CSCur01042. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034141 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151112-ios2
CVE ID: CVE-2015-6367 State: PUBLISHED Published: 2015-11-14T02:00:00 Last Updated: 2024-08-06T07:22:20.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Aironet 1800 devices with software 8.1(131.0) allow remote attackers to cause a denial of service (CPU consumption) by improperly establishing many SSHv2 connections, aka Bug ID CSCux13374. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151113-aironet - http://www.securitytracker.com/id/1034157
CVE ID: CVE-2015-6368 State: PUBLISHED Published: 2015-11-19T02:00:00 Last Updated: 2024-08-06T07:22:20.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to read files via a crafted HTTP request, aka Bug ID CSCux10608. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151116-firepower
CVE ID: CVE-2015-6369 State: PUBLISHED Published: 2015-11-19T02:00:00 Last Updated: 2024-08-06T07:22:20.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The USB driver in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows physically proximate attackers to cause a denial of service via a crafted USB device that triggers invalid USB commands, aka Bug ID CSCux10531. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151116-fire
CVE ID: CVE-2015-6370 State: PUBLISHED Published: 2015-11-19T02:00:00 Last Updated: 2024-08-06T07:22:21.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows local users to execute arbitrary OS commands as root via crafted CLI input, aka Bug ID CSCux10578. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151116-fire1
CVE ID: CVE-2015-6371 State: PUBLISHED Published: 2015-11-19T02:00:00 Last Updated: 2024-08-06T07:22:20.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to read arbitrary files via crafted parameters to unspecified scripts, aka Bug ID CSCux10621. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151117-firepower1
CVE ID: CVE-2015-6372 State: PUBLISHED Published: 2015-11-18T15:00:00 Last Updated: 2024-08-06T07:22:21.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux10614. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151117-firepower2
CVE ID: CVE-2015-6373 State: PUBLISHED Published: 2015-11-18T15:00:00 Last Updated: 2024-08-06T07:22:20.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux10611. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151117-firepower3
CVE ID: CVE-2015-6374 State: PUBLISHED Published: 2015-11-19T02:00:00 Last Updated: 2024-08-06T07:22:20.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, aka Bug ID CSCux10604. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151117-firepower4
CVE ID: CVE-2015-6375 State: PUBLISHED Published: 2015-11-21T11:00:00 Last Updated: 2024-08-06T07:22:21.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: The debug-logging (aka debug cns) feature in Cisco Networking Services (CNS) for IOS 15.2(2)E3 allows local users to obtain sensitive information by reading an unspecified file, aka Bug ID CSCux18010. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77676 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151120-ns
CVE ID: CVE-2015-6376 State: PUBLISHED Published: 2015-11-21T11:00:00 Last Updated: 2024-08-06T07:22:21.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv72412. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151120-tvcs
CVE ID: CVE-2015-6377 State: PUBLISHED Published: 2015-11-24T02:00:00 Last Updated: 2024-08-06T07:22:20.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Virtual Topology System (VTS) 2.0(0) and 2.0(1) allows remote attackers to cause a denial of service (CPU and memory consumption, and TCP port outage) via a flood of crafted TCP packets, aka Bug ID CSCux13379. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151123-vts
CVE ID: CVE-2015-6378 State: PUBLISHED Published: 2015-12-14T02:00:00 Last Updated: 2024-08-06T07:22:21.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on Cisco DPQ3925 devices with EDVA 5.5.2 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv05943. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151208-gateway - http://www.securitytracker.com/id/1034345
CVE ID: CVE-2015-6379 State: PUBLISHED Published: 2015-11-25T02:00:00 Last Updated: 2024-08-06T07:22:20.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in the management interface in Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote authenticated users to cause a denial of service (device crash) via a crafted XML document, aka Bug ID CSCut14223. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151123-asa - http://www.securitytracker.com/id/1034251
CVE ID: CVE-2015-6380 State: PUBLISHED Published: 2015-11-24T02:00:00 Last Updated: 2024-08-06T07:22:21.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to execute arbitrary OS commands via crafted parameters, aka Bug ID CSCux10622. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151123-fire
CVE ID: CVE-2015-6382 State: PUBLISHED Published: 2015-11-26T02:00:00 Last Updated: 2024-08-06T07:22:21.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ASR 5000 devices with software 16.0(900) allow remote attackers to cause a denial of service (telnetd process restart) via a TELNET connection, aka Bug ID CSCuv25815. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034254 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151125-asr5000
CVE ID: CVE-2015-6383 State: PUBLISHED Published: 2015-12-03T02:00:00 Last Updated: 2024-08-06T07:22:20.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 15.4(3)S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78521 - http://www.securitytracker.com/id/1034277 - http://www.securitytracker.com/id/1034296 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151130-asa
CVE ID: CVE-2015-6384 State: PUBLISHED Published: 2015-12-05T02:00:00 Last Updated: 2024-08-06T07:22:20.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka Bug ID CSCuw86442. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151201-wmc
CVE ID: CVE-2015-6385 State: PUBLISHED Published: 2015-12-01T11:00:00 Last Updated: 2024-08-06T07:22:21.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The publish-event event-manager feature in Cisco IOS 15.5(2)S and 15.5(3)S on Cloud Services Router 1000V devices allows local users to execute arbitrary commands with root privileges by leveraging administrative access to enter crafted environment variables, aka Bug ID CSCux14943. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151130-csr - http://www.securitytracker.com/id/1034274
CVE ID: CVE-2015-6386 State: PUBLISHED Published: 2015-12-01T11:00:00 Last Updated: 2024-08-06T07:22:21.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: The passthrough FTP feature on Cisco Web Security Appliance (WSA) devices with software 8.0.7-142 and 8.5.1-021 allows remote attackers to cause a denial of service (CPU consumption) via FTP sessions in which the control connection is ended after data transfer, aka Bug ID CSCut94150. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034276 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151130-wsa
CVE ID: CVE-2015-6387 State: PUBLISHED Published: 2015-12-05T02:00:00 Last Updated: 2024-08-06T07:22:21.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Unified Computing System (UCS) Central Software 1.3(0.1) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCux33573. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151201-ucs - http://www.securitytracker.com/id/1034275
CVE ID: CVE-2015-6388 State: PUBLISHED Published: 2015-12-05T02:00:00 Last Updated: 2024-08-06T07:22:21.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCux33575. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034380 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151201-ucs1 - http://www.securityfocus.com/bid/78870
CVE ID: CVE-2015-6389 State: PUBLISHED Published: 2015-12-13T02:00:00 Last Updated: 2024-08-06T07:22:21.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78738 - http://www.securitytracker.com/id/1034361 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-pca
CVE ID: CVE-2015-6390 State: PUBLISHED Published: 2015-12-03T02:00:00 Last Updated: 2024-08-06T07:22:20.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unity Connection 9.1(1.10) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034286 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151202-pca
CVE ID: CVE-2015-6391 State: PUBLISHED Published: 2015-12-05T02:00:00 Last Updated: 2024-08-06T07:22:21.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service (resource consumption and functionality loss) via a large amount of network traffic, aka Bug ID CSCuh51331. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151202-sip - http://www.securitytracker.com/id/1034285
CVE ID: CVE-2015-6392 State: PUBLISHED Published: 2016-10-06T01:00:00 Last Updated: 2024-08-06T07:22:21.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device crash) via crafted IPv4 DHCP packets to the (1) DHCPv4 relay agent or (2) smart relay agent, aka Bug IDs CSCuq24603, CSCur93159, CSCus21693, and CSCut76171. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93406 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhc
securityfocus.com/bid/93406 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp1 - http://www.securitytracker.com/id/1036948
CVE ID: CVE-2015-6393 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T07:22:21.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device crash) via malformed IPv4 DHCP packets to the DHCPv4 relay agent, aka Bug IDs CSCuq39250, CSCus21733, CSCus21739, CSCut76171, and CSCux67182. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93419 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp2
urityfocus.com/bid/93419 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp2 - http://www.securitytracker.com/id/1036949