Vulnerabilities > Cisco > IOS > 15.5.3.m1

DATE CVE VULNERABILITY TITLE RISK
2016-04-20 CVE-2016-1384 Permissions, Privileges, and Access Controls vulnerability in Cisco IOS and IOS XE
The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898.
network
low complexity
cisco CWE-264
5.0
2016-03-26 CVE-2016-1344 Resource Management Errors vulnerability in Cisco IOS and IOS XE
The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via fragmented packets, aka Bug ID CSCux38417.
network
cisco CWE-399
7.1
2015-12-19 CVE-2015-6429 Data Processing Errors vulnerability in Cisco IOS and IOS XE
The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service (IPsec connection termination) via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236.
network
low complexity
cisco CWE-19
5.0