Vulnerabilities > Cisco > IOS > 12.1

DATE CVE VULNERABILITY TITLE RISK
2003-08-18 CVE-2003-0567 Improper Input Validation vulnerability in Cisco products
Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.
network
low complexity
cisco CWE-20
7.8
2002-12-31 CVE-2002-2208 Denial Of Service vulnerability in Cisco IOS EIGRP Announcement ARP
Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
7.8
2002-12-31 CVE-2002-2053 Denial Of Service vulnerability in Cisco IOS 12.1
The design of the Hot Standby Routing Protocol (HSRP), as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service (CPU consumption) via a router with the same IP address as the interface on which HSRP is running, which causes a loop.
network
low complexity
cisco
5.0
2002-12-31 CVE-2002-1768 Denial of Service vulnerability in Cisco Malformed HSRP Traffic
Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service (CPU consumption) via randomly sized UDP packets to the Hot Standby Routing Protocol (HSRP) port 1985.
network
low complexity
cisco
5.0
2002-12-31 CVE-2002-1706 Improper Verification of Cryptographic Signature vulnerability in Cisco IOS
Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification (DOCSIS) settings via a DOCSIS file without a Message Integrity Check (MIC) signature, which is approved by the router.
network
low complexity
cisco CWE-347
7.5
2002-06-25 CVE-2002-0339 Unspecified vulnerability in Cisco IOS
Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length.
network
low complexity
cisco
5.0
2001-11-28 CVE-2001-0929 Unspecified vulnerability in Cisco IOS
Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists.
network
low complexity
cisco
7.5
2001-10-09 CVE-2001-1071 Denial of Service vulnerability in Cisco Catos and IOS
Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP neighbor announcements.
network
low complexity
cisco
5.0
2001-07-24 CVE-2001-1097 Denial of Service vulnerability in Cisco IOS UDP
Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets.
network
low complexity
cisco
5.0
2001-05-03 CVE-2001-0288 Unspecified vulnerability in Cisco IOS
Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
network
low complexity
cisco
7.5