Cisco Email Security Appliance HTTP Response Splitting Vulnerability

A vulnerability in the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack. The vulnerability is due to the failure of the application or its environment to properly san...

Cisco Web Security Appliance Advanced Malware Protection File Bypass Vulnerability

A vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass a configured AMP file filtering rule.

The fil...

Cisco Immunet Antimalware Installer DLL Preloading Vulnerability

An untrusted search path vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the ...

Cisco IP Phone 8800 Series Command Injection Vulnerability in Debug Shell

A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated, local attacker to execute arbitrary commands. The vulnerability is due to insufficient input validation.

An attacker could exploit this vulnerabilit...

Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol...

A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in anbsp;denial of service (DoS...

Cisco Wireless LAN Controller 802.11v Basic Service Set Transition Management Denial...

A vulnerability in the implementation of 802.11v Basic Service Setnbsp;(BSS) Transition Management functionality in Cisconbsp;Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpec...

Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms Extensible...

A vulnerability in Extensible Authentication Protocol (EAP) ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access ...

Cisco Wireless LAN Controller Simple Network Management Protocol Memory Leak Denial...

A vulnerability in the Simple Network Management Protocolnbsp;(SNMP) subsystem of Cisconbsp;Wireless LAN Controllers could allow an authenticated, remote attacker to cause an affected device to restart, resulting in a denial of servicenbsp;(DoS)...

Cisco Aironet 1560, 2800, and 3800 Series Access Point Platforms 802.11...

A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency (RF) adjacent attacker to cause the Access Point (AP) to reload, ...

Cisco Firepower 4100 Series NGFW and Firepower 9300 Security Appliance Smart...

A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that could be...

Cisco Aironet 3800 Series Access Points Protected Management Frames User Denial...

A vulnerability in the handling of 802.11w Protected Management Framesnbsp;(PAF) by Cisconbsp;Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device. The vul...

Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower...

A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileg...