Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-2138 State: PUBLISHED Published: 2014-04-02T01:00:00 Last Updated: 2024-08-06T10:05:59.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCun82349. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2138 - http://tools.cisco.com/security/center/viewAlert.x?alertId=33607
CVE ID: CVE-2014-2139 State: PUBLISHED Published: 2014-04-12T01:00:00 Last Updated: 2024-08-06T10:05:59.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (flash write outage) via a TCP FIN attack that triggers file-descriptor exhaustion, aka Bug ID CSCug97315. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=33681 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2139
CVE ID: CVE-2014-2140 State: PUBLISHED Published: 2014-04-12T01:00:00 Last Updated: 2024-08-06T10:06:00.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (card reset) via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=33680 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2140
CVE ID: CVE-2014-2141 State: PUBLISHED Published: 2014-04-10T01:00:00 Last Updated: 2024-08-06T10:05:59.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a denial of service (card reset) via crafted session-close actions, aka Bug ID CSCug97416. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2141 - http://tools.cisco.com/security/center/viewAlert.x?alertId=33682
CVE ID: CVE-2014-2142 State: PUBLISHED Published: 2014-04-12T01:00:00 Last Updated: 2024-08-06T10:05:59.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to cause a denial of service (card reload) via a crafted HTTP URI, aka Bug ID CSCun06870. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=33679 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2142
CVE ID: CVE-2014-2143 State: PUBLISHED Published: 2014-04-04T15:00:00 Last Updated: 2024-08-06T10:05:59.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IKE implementation in Cisco IOS 15.4(1)T and earlier and IOS XE allows remote attackers to cause a denial of service (security-association drop) via crafted Main Mode packets, aka Bug ID CSCun31021. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=33639 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2143
CVE ID: CVE-2014-2144 State: PUBLISHED Published: 2014-04-05T01:00:00 Last Updated: 2024-08-06T10:05:59.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service (IPv4 and IPv6 transit outage) via crafted redirect messages, aka Bug ID CSCum14266. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2144
CVE ID: CVE-2014-2145 State: PUBLISHED Published: 2014-04-05T01:00:00 Last Updated: 2024-08-06T10:05:59.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files via vectors related to unenforced access constraints for .wav files and the audio/x-wav MIME type, aka Bug ID CSCun91071. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66676 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2145
CVE ID: CVE-2014-2146 State: PUBLISHED Published: 2016-09-22T17:00:00 Last Updated: 2024-08-06T10:05:59.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attackers to bypass intended resource-access restrictions via spoofed traffic that matches one of these sessions, aka Bug IDs CSCun94946 and CSCun96847. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93126 - https://tools.cisco.com/security/center/viewAlert.x?alertId=39129
CVE ID: CVE-2014-2147 State: PUBLISHED Published: 2015-02-12T01:00:00 Last Updated: 2024-08-06T10:05:59.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Cisco Prime Infrastructure 2.1 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCuj42444. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=37419 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2147 -
y/center/viewAlert.x?alertId=37419 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2147 - http://www.securityfocus.com/bid/72551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100755 - http://www.securitytracker.com/id/1031715
CVE ID: CVE-2014-2149 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-2150 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-2151 State: PUBLISHED Published: 2014-06-18T16:00:00 Last Updated: 2024-08-06T10:05:59.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebVPN portal in Cisco Adaptive Security Appliance (ASA) Software 8.4(.7.15) and earlier allows remote authenticated users to obtain sensitive information via a crafted JavaScript file, aka Bug ID CSCui04520. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2151 - http://www.securitytracker.com/id/1030445 - http://www.securityfocus.com/bid/68063 - http://tools.cisco.com/security/center/viewAlert.x?alertId=34627
CVE ID: CVE-2014-2152 State: PUBLISHED Published: 2015-02-12T01:00:00 Last Updated: 2024-08-06T10:05:59.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the INSERT page in Cisco Prime Infrastructure (PI) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun21868. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100747 - http://www.securityfocus.com/bid/72558 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2152 - http://www.securitytracker.com/id/1031715
CVE ID: CVE-2014-2153 State: PUBLISHED Published: 2015-02-12T01:00:00 Last Updated: 2024-08-06T10:05:59.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in INSERT pages in Cisco Prime Infrastructure allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun21869. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100746 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2153 - http://www.securitytracker.com/id/1031715 - http://www.securityfocus.com/bid/72555
CVE ID: CVE-2014-2154 State: PUBLISHED Published: 2014-04-23T10:00:00 Last Updated: 2024-08-06T10:05:59.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (memory consumption and instability) via crafted SIP packets, aka Bug ID CSCuf67469. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2154
CVE ID: CVE-2014-2155 State: PUBLISHED Published: 2014-04-19T21:00:00 Last Updated: 2024-08-06T10:05:59.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denial of service (daemon reload) via a malformed DHCPv6 packet, aka Bug ID CSCuo07437. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2155 - http://tools.cisco.com/security/center/viewAlert.x?alertId=33850
CVE ID: CVE-2014-2156 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:06:00.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp
CVE ID: CVE-2014-2157 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp
CVE ID: CVE-2014-2158 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45720. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp
CVE ID: CVE-2014-2159 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCtq78722. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp
CVE ID: CVE-2014-2160 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45745. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp
CVE ID: CVE-2014-2161 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-mxp
CVE ID: CVE-2014-2162 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:06:00.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCud29566. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2163 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua64961. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2164 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCuj94651. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2165 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCtq72699. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2166 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCto70562. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2167 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:06:00.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua86589. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2168 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets, aka Bug ID CSCty44804. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2169 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bug ID CSCue60211. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2170 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell (aka tcsh) scripts, aka Bug ID CSCue60202. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2171 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2172 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2173 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:06:00.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local users to gain privileges via unspecified commands, aka Bug ID CSCub67692. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2174 State: PUBLISHED Published: 2015-05-25T00:00:00 Last Updated: 2024-08-06T10:05:59.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by sending packets on the local network and allows physically proximate attackers to obtain root privileges via unspecified vectors, aka Bug ID CSCub67651. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tc
CVE ID: CVE-2014-2175 State: PUBLISHED Published: 2014-05-02T10:00:00 Last Updated: 2024-08-06T10:05:59.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service (memory consumption) via crafted H.225 packets, aka Bug ID CSCtq78849. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte
CVE ID: CVE-2014-2176 State: PUBLISHED Published: 2014-06-14T10:00:00 Last Updated: 2024-08-06T10:05:59.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (NP chip and line card reload) via malformed IPv6 packets, aka Bug ID CSCun71928. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58722 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140611-ipv6 - http://www.securityfocus.com/bid/68005 - http://www.securitytracker.com/id/1030400
CVE ID: CVE-2014-2177 State: PUBLISHED Published: 2014-11-07T11:00:00 Last Updated: 2024-08-06T10:05:59.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: The network-diagnostics administration interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote authenticated users to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCuh87126. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv - http://packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Ex
coSecurityAdvisory/cisco-sa-20141105-rv - http://packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Execution.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98497 - http://seclists.org/fulldisclosure/2014/Nov/6 - http://www.securityfocus.com/archive/1/533917/100/0/threaded - http://www.securitytracker.com/id/1031171
CVE ID: CVE-2014-2178 State: PUBLISHED Published: 2014-11-07T11:00:00 Last Updated: 2024-08-06T10:05:59.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID CSCuh87145. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv - http://packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-
ter/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv - http://packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Execution.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98498 - http://seclists.org/fulldisclosure/2014/Nov/6 - http://www.securityfocus.com/archive/1/533917/100/0/threaded - http://www.securitytracker.com/id/1031171
CVE ID: CVE-2014-2179 State: PUBLISHED Published: 2014-11-07T11:00:00 Last Updated: 2024-08-06T10:05:59.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to upload files to arbitrary locations via a crafted HTTP request, aka Bug ID CSCuh86998. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv - http://packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Execution.html - http://seclists.org/fulldisclosure/201
etstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Execution.html - http://seclists.org/fulldisclosure/2014/Nov/6 - http://www.securityfocus.com/archive/1/533917/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/98499 - http://www.securitytracker.com/id/1031171