auren-research/cyber-sec huggingface dataset:
cveID: CVE-2019-1322
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Privilege Escalation Vulnerability
dateAdded: 2022-03-15
shortDescription: A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-1322
cveID: CVE-2019-1315
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
dateAdded: 2022-03-15
shortDescription: A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-1315
cwes: CWE-59
cveID: CVE-2019-1253
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
dateAdded: 2022-03-15
shortDescription: A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-1253
cwes: CWE-59
cveID: CVE-2019-1132
vendorProject: Microsoft
product: Win32k
vulnerabilityName: Microsoft Win32k Privilege Escalation Vulnerability
dateAdded: 2022-03-15
shortDescription: A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-1132
cveID: CVE-2019-1129
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
dateAdded: 2022-03-15
shortDescription: A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-1129
cwes: CWE-59
cveID: CVE-2019-1069
vendorProject: Microsoft
product: Task Scheduler
vulnerabilityName: Microsoft Task Scheduler Privilege Escalation Vulnerability
dateAdded: 2022-03-15
shortDescription: A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-1069
cwes: CWE-59
cveID: CVE-2019-1064
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
dateAdded: 2022-03-15
shortDescription: A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-1064
cwes: CWE-59
cveID: CVE-2019-0841
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
dateAdded: 2022-03-15
shortDescription: A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-0841
cwes: CWE-59
cveID: CVE-2019-0543
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Privilege Escalation Vulnerability
dateAdded: 2022-03-15
shortDescription: A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-0543
cwes: CWE-287
cveID: CVE-2018-8120
vendorProject: Microsoft
product: Win32k
vulnerabilityName: Microsoft Win32k Privilege Escalation Vulnerability
dateAdded: 2022-03-15
shortDescription: A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-8120
cwes: CWE-404
cveID: CVE-2017-0101
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
dateAdded: 2022-03-15
shortDescription: A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-0101
cwes: CWE-119
cveID: CVE-2016-3309
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Kernel Privilege Escalation Vulnerability
dateAdded: 2022-03-15
shortDescription: A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-3309
cwes: CWE-264
cveID: CVE-2015-2546
vendorProject: Microsoft
product: Win32k
vulnerabilityName: Microsoft Win32k Memory Corruption Vulnerability
dateAdded: 2022-03-15
shortDescription: The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-04-05
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2015-2546
cwes: CWE-119
cveID: CVE-2022-26486
vendorProject: Mozilla
product: Firefox
vulnerabilityName: Mozilla Firefox Use-After-Free Vulnerability
dateAdded: 2022-03-07
shortDescription: Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-21
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-26486
cwes: CWE-416
cveID: CVE-2022-26485
vendorProject: Mozilla
product: Firefox
vulnerabilityName: Mozilla Firefox Use-After-Free Vulnerability
dateAdded: 2022-03-07
shortDescription: Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-21
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-26485
cwes: CWE-416
cveID: CVE-2021-21973
vendorProject: VMware
product: vCenter Server and Cloud Foundation
vulnerabilityName: VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
dateAdded: 2022-03-07
shortDescription: VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-21
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-21973
cwes: CWE-20
CWE-918
cveID: CVE-2020-8218
vendorProject: Pulse Secure
product: Pulse Connect Secure
vulnerabilityName: Pulse Connect Secure Code Injection Vulnerability
dateAdded: 2022-03-07
shortDescription: A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-07
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-8218
cwes: CWE-94
cveID: CVE-2019-11581
vendorProject: Atlassian
product: Jira Server and Data Center
vulnerabilityName: Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
dateAdded: 2022-03-07
shortDescription: Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-07
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-11581
cwes: CWE-74
cveID: CVE-2017-6077
vendorProject: NETGEAR
product: Wireless Router DGN2200
vulnerabilityName: NETGEAR DGN2200 Remote Code Execution Vulnerability
dateAdded: 2022-03-07
shortDescription: NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-07
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6077
cwes: CWE-78
cveID: CVE-2016-6277
vendorProject: NETGEAR
product: Multiple Routers
vulnerabilityName: NETGEAR Multiple Routers Remote Code Execution Vulnerability
dateAdded: 2022-03-07
shortDescription: NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-07
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2016-6277
cwes: CWE-352
cveID: CVE-2013-0631
vendorProject: Adobe
product: ColdFusion
vulnerabilityName: Adobe ColdFusion Information Disclosure Vulnerability
dateAdded: 2022-03-07
shortDescription: Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-07
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-0631
cwes: CWE-200
cveID: CVE-2013-0629
vendorProject: Adobe
product: ColdFusion
vulnerabilityName: Adobe ColdFusion Directory Traversal Vulnerability
dateAdded: 2022-03-07
shortDescription: Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-07
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-0629
cwes: CWE-264
cveID: CVE-2013-0625
vendorProject: Adobe
product: ColdFusion
vulnerabilityName: Adobe ColdFusion Authentication Bypass Vulnerability
dateAdded: 2022-03-07
shortDescription: Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-07
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2013-0625
cwes: CWE-255
cveID: CVE-2009-3960
vendorProject: Adobe
product: BlazeDS
vulnerabilityName: Adobe BlazeDS Information Disclosure Vulnerability
dateAdded: 2022-03-07
shortDescription: Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-09-07
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2009-3960
cveID: CVE-2022-20708
vendorProject: Cisco
product: Small Business RV160, RV260, RV340, and RV345 Series Routers
vulnerabilityName: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-20708
cwes: CWE-121
cveID: CVE-2022-20703
vendorProject: Cisco
product: Small Business RV160, RV260, RV340, and RV345 Series Routers
vulnerabilityName: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-20703
cwes: CWE-347
cveID: CVE-2022-20701
vendorProject: Cisco
product: Small Business RV160, RV260, RV340, and RV345 Series Routers
vulnerabilityName: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-20701
cwes: CWE-121
cveID: CVE-2022-20700
vendorProject: Cisco
product: Small Business RV160, RV260, RV340, and RV345 Series Routers
vulnerabilityName: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-20700
cwes: CWE-121
cveID: CVE-2022-20699
vendorProject: Cisco
product: Small Business RV160, RV260, RV340, and RV345 Series Routers
vulnerabilityName: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2022-20699
cwes: CWE-785
cveID: CVE-2021-41379
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Installer Privilege Escalation Vulnerability
dateAdded: 2022-03-03
shortDescription: Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-41379
cwes: CWE-1386
cveID: CVE-2020-1938
vendorProject: Apache
product: Tomcat
vulnerabilityName: Apache Tomcat Improper Privilege Management Vulnerability
dateAdded: 2022-03-03
shortDescription: Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-1938
cveID: CVE-2020-11899
vendorProject: Treck TCP/IP stack
product: IPv6
vulnerabilityName: Treck TCP/IP stack Out-of-Bounds Read Vulnerability
dateAdded: 2022-03-03
shortDescription: The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-11899
cwes: CWE-125
cveID: CVE-2019-16928
vendorProject: Exim
product: Exim Internet Mailer
vulnerabilityName: Exim Out-of-bounds Write Vulnerability
dateAdded: 2022-03-03
shortDescription: Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-16928
cwes: CWE-787
cveID: CVE-2019-1652
vendorProject: Cisco
product: Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
vulnerabilityName: Cisco Small Business Routers Improper Input Validation Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-1652
cwes: CWE-20
cveID: CVE-2019-1297
vendorProject: Microsoft
product: Excel
vulnerabilityName: Microsoft Excel Remote Code Execution Vulnerability
dateAdded: 2022-03-03
shortDescription: A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-1297
cveID: CVE-2018-8581
vendorProject: Microsoft
product: Exchange Server
vulnerabilityName: Microsoft Exchange Server Privilege Escalation Vulnerability
dateAdded: 2022-03-03
shortDescription: A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-8581
cveID: CVE-2018-8298
vendorProject: ChakraCore
product: ChakraCore scripting engine
vulnerabilityName: ChakraCore Scripting Engine Type Confusion Vulnerability
dateAdded: 2022-03-03
shortDescription: The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-8298
cwes: CWE-843
cveID: CVE-2018-0180
vendorProject: Cisco
product: IOS Software
vulnerabilityName: Cisco IOS Software Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0180
cwes: CWE-399
cveID: CVE-2018-0179
vendorProject: Cisco
product: IOS Software
vulnerabilityName: Cisco IOS Software Denial-of-Service Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0179
cwes: CWE-399
cveID: CVE-2018-0175
vendorProject: Cisco
product: IOS, XR, and XE Software
vulnerabilityName: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
dateAdded: 2022-03-03
shortDescription: Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0175
cwes: CWE-119
cveID: CVE-2018-0174
vendorProject: Cisco
product: IOS XE Software
vulnerabilityName: Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0174
cwes: CWE-20
cveID: CVE-2018-0173
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets can allow for denial-of-service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0173
cwes: CWE-20
cveID: CVE-2018-0172
vendorProject: Cisco
product: IOS and IOS XE Software
vulnerabilityName: Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
dateAdded: 2022-03-03
shortDescription: A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-03-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0172
cwes: CWE-20