Vulnerabilities > Cisco > IOS XE > 3.9.0s

DATE CVE VULNERABILITY TITLE RISK
2014-03-27 CVE-2014-2113 Improper Input Validation vulnerability in Cisco IOS and IOS XE
Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service (I/O memory consumption and device reload) via a malformed IPv6 packet, aka Bug ID CSCui59540.
network
low complexity
cisco CWE-20
7.8
2014-03-27 CVE-2014-2108 Improper Input Validation vulnerability in Cisco IOS and IOS XE
Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service (device reload) via a malformed IKEv2 packet, aka Bug ID CSCui88426.
network
low complexity
cisco CWE-20
7.8
2013-10-31 CVE-2013-5547 Improper Input Validation vulnerability in Cisco products
Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending malformed EoGRE packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCuf08269.
network
low complexity
cisco CWE-20
7.8
2013-10-31 CVE-2013-5545 Improper Input Validation vulnerability in Cisco products
The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending many PPTP packets over NAT, aka Bug ID CSCuh19936.
network
low complexity
cisco CWE-20
7.8
2013-08-05 CVE-2013-0149 Remote Security Bypass vulnerability in Cisco IOS and IOS XE
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a (1) unicast or (2) multicast packet, aka Bug IDs CSCug34485, CSCug34469, CSCug39762, CSCug63304, and CSCug39795.
network
cisco
5.8