Vulnerabilities > Cisco > IOS XE > 3.5e

DATE CVE VULNERABILITY TITLE RISK
2014-09-25 CVE-2014-3354 Improper Input Validation vulnerability in Cisco IOS and IOS XE
Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCui11547.
network
low complexity
cisco CWE-20
7.8
2014-05-20 CVE-2014-3269 Improper Input Validation vulnerability in Cisco IOS XE 3.5E
The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service (device reload) by polling frequently, aka Bug ID CSCug65204.
network
low complexity
cisco CWE-20
6.8
2014-04-29 CVE-2014-2183 Improper Input Validation vulnerability in Cisco products
The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.
network
cisco CWE-20
6.3
2014-04-24 CVE-2012-5723 Improper Input Validation vulnerability in Cisco products
Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948.
low complexity
cisco CWE-20
6.1
2013-12-28 CVE-2013-6981 Improper Input Validation vulnerability in Cisco IOS XE
Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fragmented MPLS IP packets, aka Bug ID CSCul00709.
network
high complexity
cisco CWE-20
5.4
2013-11-22 CVE-2013-6692 Resource Management Errors vulnerability in Cisco IOS XE
Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service (device reload) via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949.
network
cisco CWE-399
6.3