Vulnerabilities > Improper Input Validation

DATE CVE VULNERABILITY TITLE RISK
2020-09-24 CVE-2020-3511 Improper Input Validation vulnerability in Cisco IOS XE 15.1(4)M
A vulnerability in the ISDN subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition.
low complexity
cisco CWE-20
7.4
2020-09-24 CVE-2020-3497 Improper Input Validation vulnerability in Cisco IOS XE 16.12.1
Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of an affected device.
low complexity
cisco CWE-20
7.4
2020-09-24 CVE-2020-3494 Improper Input Validation vulnerability in Cisco IOS XE 16.12.1
Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of an affected device.
low complexity
cisco CWE-20
7.4
2020-09-24 CVE-2020-3493 Improper Input Validation vulnerability in Cisco IOS XE 16.12.1
Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of an affected device.
low complexity
cisco CWE-20
7.4
2020-09-24 CVE-2020-3492 Improper Input Validation vulnerability in Cisco IOS XE 16.12.1
A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers and Cisco AireOS Software for Cisco Wireless LAN Controllers (WLC) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-20
8.6
2020-09-24 CVE-2020-3489 Improper Input Validation vulnerability in Cisco IOS XE 16.12.1
Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of an affected device.
low complexity
cisco CWE-20
7.4
2020-09-24 CVE-2020-3488 Improper Input Validation vulnerability in Cisco IOS XE 16.12.1
Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of an affected device.
low complexity
cisco CWE-20
7.4
2020-09-24 CVE-2020-3486 Improper Input Validation vulnerability in Cisco IOS XE
Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of an affected device.
low complexity
cisco CWE-20
6.5
2020-09-24 CVE-2020-3475 Improper Input Validation vulnerability in Cisco IOS
Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-20
8.1
2020-09-24 CVE-2020-3429 Improper Input Validation vulnerability in Cisco IOS XE 16.12.1S
A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service (DoS) condition on an affected device.
low complexity
cisco CWE-20
6.5