A privileged attacker who can already read logs on a Duo Authentication Proxy host may find sensitive data left unmasked in debug log files, exposing confidentiality-sensitive information.
Posts tagged: Cisco
Cisco Identity Services Engine Arbitrary File Upload Vulnerability
An authenticated ISE administrator can abuse a flaw in the GUI’s file copy feature to write arbitrary files to the underlying device, with no workaround available.
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
An unauthenticated attacker who can reach TCP port 4786 on a Cisco switch running Smart Install client mode can crash it or run arbitrary code, with no credentials or workaround available.
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Web Services Denial of Service Vulnerability
An unauthenticated attacker can crash a Cisco ASA or FTD firewall with a single crafted HTTP request to its web management interface or REST API, forcing a reload with no login required.
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control Rules Bypass Vulnerability
On Cisco ASA and FTD devices with a loopback interface configured, access control rules meant to block certain traffic can be bypassed, letting unauthenticated remote traffic reach that interface anyway.
Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerabilities
Six flaws in IKEv2 VPN handling on Cisco IOS, IOS XE, ASA and FTD let an unauthenticated attacker crash the device or leak memory until it fails, with no workaround short of patching.
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Authenticated Command Injection Vulnerabilities
An admin who already has valid credentials on Cisco ASA or FTD firewalls can inject crafted commands that run as root on the underlying OS, turning administrative access into full system control.
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software DHCP Denial of Service Vulnerability
A firewall’s DHCP client will crash from crafted DHCPv4 packets sent by anyone on the same segment, exhausting memory and needing a manual reboot to recover.
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Server Denial of Service Vulnerability
An authenticated VPN user can send crafted HTTP requests to the SSL VPN web server on Cisco ASA and FTD, creating or deleting operating system files and potentially forcing a reboot to restore VPN service.
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Network Address Translation DNS Inspection Denial of Service Vulnerability
A DNS inspection bug in Cisco ASA and FTD firewalls lets an unauthenticated attacker crash the device with crafted DNS packets whenever NAT and DNS inspection are both enabled.