A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition, or potentially corrupt the BGP routing table, which could result in network instability. The vulnerability exists due to changes in the implementation of the BGP MPLS-Based Ethernet VPN RFC (RFC 7432) draft between IOS XE software releases. When the BGP Inclusive Multicast Ethernet Tag Route or BGP EVPN MAC/IP Advertisement Route update packet is received, it could be possible that the IP address length field is miscalculated. An attacker could exploit this vulnerability by sending a crafted BGP packet to an affected device after the BGP session was established. An exploit could allow the attacker to cause the affected device to reload or corrupt the BGP routing table; either outcome would result in a DoS. The vulnerability may be triggered when the router receives a crafted BGP message from a peer on an existing BGP session. This vulnerability affects all releases of Cisco IOS XE Software prior to software release 16.3 that support BGP EVPN configurations. If the device is not configured for EVPN, it is not vulnerable. Cisco Bug IDs: CSCui67191, CSCvg52875.

Published 2018-03-27 · Analyzed

7.1KEVEPSS 0.052

CVE-2018-0180

Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599.

Published 2018-03-28 · Analyzed

7.1KEVEPSS 0.049

CVE-2018-0179

Published 2018-03-28 · Analyzed

7.1KEVEPSS 0.049

CVE-2020-3524

Cisco IOS XE ROM Monitor Software Vulnerability

Published 2020-09-24 · Modified

6.9EPSS 0.003

CVE-2021-34723

Cisco IOS XE SD-WAN Software Arbitrary File Overwrite Vulnerability

Published 2021-09-23 · Modified

6.9EPSS 0.002

CVE-2021-34703

Cisco IOS and IOS XE Software Link Layer Discovery Protocol Denial of Service Vulnerability

Published 2021-09-23 · Modified

6.8EPSS 0.012

CVE-2023-20081

Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability

Published 2023-03-23 · Modified

6.8EPSS 0.007

CVE-2021-34724

Cisco IOS XE SD-WAN Software Privilege Escalation Vulnerability

Published 2021-09-23 · Modified

6.6EPSS 0.003

CVE-2017-12232

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a misclassification of Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc03809.

Published 2017-09-28 · Analyzed

6.5KEVEPSS 0.022

CVE-2023-20066

Cisco IOS XE Software Web UI Path Traversal Vulnerability

Published 2023-03-23 · Modified

6.5EPSS 0.017

CVE-2020-3503

Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability

Published 2020-09-24 · Modified

6.0EPSS 0.003

CVE-2020-3299

Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability