Описание
Уязвимость операционной системы Cisco IOS связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
Вендор
Cisco Systems Inc.
Наименование ПО
Cisco IOS
Версия ПО
15.6(1)T0a (Cisco IOS)
15.5(3)M (Cisco IOS)
15.5(1)T (Cisco IOS)
15.5(2)T (Cisco IOS)
15.5(1)T3 (Cisco IOS)
15.5(2)T1 (Cisco IOS)
15.5(2)T2 (Cisco IOS)
15.5(2)T3 (Cisco IOS)
15.5(2)T4 (Cisco IOS)
15.5(1)T4 (Cisco IOS)
15.5(3)M1 (Cisco IOS)
15.5(3)M0a (Cisco IOS)
15.5(3)M2 (Cisco IOS)
15.5(3)M3 (Cisco IOS)
15.5(3)M4 (Cisco IOS)
15.5(3)M4a (Cisco IOS)
15.5(3)M5 (Cisco IOS)
15.5(3)M6 (Cisco IOS)
15.5(3)M6a (Cisco IOS)
15.6(1)T (Cisco IOS)
15.6(2)T (Cisco IOS)
15.6(1)T1 (Cisco IOS)
15.6(2)T1 (Cisco IOS)
15.6(1)T2 (Cisco IOS)
15.6(2)T2 (Cisco IOS)
15.6(1)T3 (Cisco IOS)
15.6(2)T3 (Cisco IOS)
15.6(3)M (Cisco IOS)
15.6(3)M1 (Cisco IOS)
15.6(3)M0a (Cisco IOS)
15.6(3)M1b (Cisco IOS)
15.6(3)M2 (Cisco IOS)
15.6(3)M3 (Cisco IOS)
15.6(3)M3a (Cisco IOS)
15.7(3)M (Cisco IOS)
15.3(3)JAA1 (Cisco IOS)
15.5(1)T2 (Cisco IOS)
15.4(3)M6a (Cisco IOS)
15.4(3)M7 (Cisco IOS)
15.4(3)M6 (Cisco IOS)
15.4(3)M5 (Cisco IOS)
15.4(3)M4 (Cisco IOS)
15.6(3)M6 (Cisco IOS)
15.7(3)M3 (Cisco IOS)
15.8(3)M (Cisco IOS)
15.8(3)M0a (Cisco IOS)
15.5(3)M2a (Cisco IOS)
15.4(3)M (Cisco IOS)
15.4(3)M1 (Cisco IOS)
15.4(3)M2 (Cisco IOS)
15.4(3)M3 (Cisco IOS)
15.4(3)M8 (Cisco IOS)
15.4(3)M9 (Cisco IOS)
15.4(3)M10 (Cisco IOS)
15.5(3)M7 (Cisco IOS)
15.5(3)M8 (Cisco IOS)
15.6(3)M4 (Cisco IOS)
15.6(3)M5 (Cisco IOS)
15.7(3)M1 (Cisco IOS)
15.7(3)M2 (Cisco IOS)
15.4(1)CG (Cisco IOS)
15.4(2)CG (Cisco IOS)
12.2(60)EZ16 (Cisco IOS)
15.0(2)SG11a (Cisco IOS)
15.5(3)M9 (Cisco IOS)
15.5(3)M10 (Cisco IOS)
15.5(3)M11 (Cisco IOS)
15.6(3)M7 (Cisco IOS)
15.6(3)M6a (Cisco IOS)
15.6(3)M6b (Cisco IOS)
15.7(3)M4 (Cisco IOS)
15.7(3)M5 (Cisco IOS)
15.7(3)M4a (Cisco IOS)
15.7(3)M4b (Cisco IOS)
15.8(3)M1 (Cisco IOS)
15.8(3)M2 (Cisco IOS)
15.8(3)M3 (Cisco IOS)
15.8(3)M2a (Cisco IOS)
15.8(3)M3a (Cisco IOS)
15.8(3)M3b (Cisco IOS)
15.9(3)M (Cisco IOS)
15.9(3)M0a (Cisco IOS)
15.3(3)JPJ (Cisco IOS)
Тип ПО
Операционная система
Операционные системы и аппаратные платформы
Cisco Systems Inc. Cisco IOS 15.6(1)T0a
Cisco Systems Inc. Cisco IOS 15.5(3)M
Cisco Systems Inc. Cisco IOS 15.5(1)T
Cisco Systems Inc. Cisco IOS 15.5(2)T
Cisco Systems Inc. Cisco IOS 15.5(1)T3
Cisco Systems Inc. Cisco IOS 15.5(2)T1
Cisco Systems Inc. Cisco IOS 15.5(2)T2
Cisco Systems Inc. Cisco IOS 15.5(2)T3
Cisco Systems Inc. Cisco IOS 15.5(2)T4
Cisco Systems Inc. Cisco IOS 15.5(1)T4
Cisco Systems Inc. Cisco IOS 15.5(3)M1
Cisco Systems Inc. Cisco IOS 15.5(3)M0a
Cisco Systems Inc. Cisco IOS 15.5(3)M2
Cisco Systems Inc. Cisco IOS 15.5(3)M3
Cisco Systems Inc. Cisco IOS 15.5(3)M4
Cisco Systems Inc. Cisco IOS 15.5(3)M4a
Cisco Systems Inc. Cisco IOS 15.5(3)M5
Cisco Systems Inc. Cisco IOS 15.5(3)M6
Cisco Systems Inc. Cisco IOS 15.5(3)M6a
Cisco Systems Inc. Cisco IOS 15.6(1)T
Cisco Systems Inc. Cisco IOS 15.6(2)T
Cisco Systems Inc. Cisco IOS 15.6(1)T1
Cisco Systems Inc. Cisco IOS 15.6(2)T1
Cisco Systems Inc. Cisco IOS 15.6(1)T2
Cisco Systems Inc. Cisco IOS 15.6(2)T2
Cisco Systems Inc. Cisco IOS 15.6(1)T3
Cisco Systems Inc. Cisco IOS 15.6(2)T3
Cisco Systems Inc. Cisco IOS 15.6(3)M
Cisco Systems Inc. Cisco IOS 15.6(3)M1
Cisco Systems Inc. Cisco IOS 15.6(3)M0a
Cisco Systems Inc. Cisco IOS 15.6(3)M1b
Cisco Systems Inc. Cisco IOS 15.6(3)M2
Cisco Systems Inc. Cisco IOS 15.6(3)M3
Cisco Systems Inc. Cisco IOS 15.6(3)M3a
Cisco Systems Inc. Cisco IOS 15.7(3)M
Cisco Systems Inc. Cisco IOS 15.3(3)JAA1
Cisco Systems Inc. Cisco IOS 15.5(1)T2
Cisco Systems Inc. Cisco IOS 15.4(3)M6a
Cisco Systems Inc. Cisco IOS 15.4(3)M7
Cisco Systems Inc. Cisco IOS 15.4(3)M6
Cisco Systems Inc. Cisco IOS 15.4(3)M5
Cisco Systems Inc. Cisco IOS 15.4(3)M4
Cisco Systems Inc. Cisco IOS 15.6(3)M6
Cisco Systems Inc. Cisco IOS 15.7(3)M3
Cisco Systems Inc. Cisco IOS 15.8(3)M
Cisco Systems Inc. Cisco IOS 15.8(3)M0a
Cisco Systems Inc. Cisco IOS 15.5(3)M2a
Cisco Systems Inc. Cisco IOS 15.4(3)M
Cisco Systems Inc. Cisco IOS 15.4(3)M1
Cisco Systems Inc. Cisco IOS 15.4(3)M2
Cisco Systems Inc. Cisco IOS 15.4(3)M3
Cisco Systems Inc. Cisco IOS 15.4(3)M8
Cisco Systems Inc. Cisco IOS 15.4(3)M9
Cisco Systems Inc. Cisco IOS 15.4(3)M10
Cisco Systems Inc. Cisco IOS 15.5(3)M7
Cisco Systems Inc. Cisco IOS 15.5(3)M8
Cisco Systems Inc. Cisco IOS 15.6(3)M4
Cisco Systems Inc. Cisco IOS 15.6(3)M5
Cisco Systems Inc. Cisco IOS 15.7(3)M1
Cisco Systems Inc. Cisco IOS 15.7(3)M2
Cisco Systems Inc. Cisco IOS 15.4(1)CG
Cisco Systems Inc. Cisco IOS 15.4(2)CG
Cisco Systems Inc. Cisco IOS 12.2(60)EZ16
Cisco Systems Inc. Cisco IOS 15.0(2)SG11a
Cisco Systems Inc. Cisco IOS 15.5(3)M9
Cisco Systems Inc. Cisco IOS 15.5(3)M10
Cisco Systems Inc. Cisco IOS 15.5(3)M11
Cisco Systems Inc. Cisco IOS 15.6(3)M7
Cisco Systems Inc. Cisco IOS 15.6(3)M6a
Cisco Systems Inc. Cisco IOS 15.6(3)M6b
Cisco Systems Inc. Cisco IOS 15.7(3)M4
Cisco Systems Inc. Cisco IOS 15.7(3)M5
Cisco Systems Inc. Cisco IOS 15.7(3)M4a
Cisco Systems Inc. Cisco IOS 15.7(3)M4b
Cisco Systems Inc. Cisco IOS 15.8(3)M1
Cisco Systems Inc. Cisco IOS 15.8(3)M2
Cisco Systems Inc. Cisco IOS 15.8(3)M3
Cisco Systems Inc. Cisco IOS 15.8(3)M2a
Cisco Systems Inc. Cisco IOS 15.8(3)M3a
Cisco Systems Inc. Cisco IOS 15.8(3)M3b
Cisco Systems Inc. Cisco IOS 15.9(3)M
Cisco Systems Inc. Cisco IOS 15.9(3)M0a
Cisco Systems Inc. Cisco IOS 15.3(3)JPJ
Уровень опасности уязвимости
Критический уровень опасности (базовая оценка CVSS 2.0 составляет 10)
Критический уровень опасности (базовая оценка CVSS 3.0 составляет 9,8)
Возможные меры по устранению уязвимости
Использование рекомендаций:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-iot-rce-xYRSeMNH
Статус уязвимости
Подтверждена производителем
Наличие эксплойта
Данные уточняются
Информация об устранении
Уязвимость устранена
Идентификаторы других систем описаний уязвимостей
- CVE
EPSS
Процентиль: 95%
0.16401
Средний
9.8 Critical
CVSS3
10 Critical
CVSS2
Связанные уязвимости
CVSS3: 9.8
nvd
больше 5 лет назад
Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker or an authenticated, local attacker to execute arbitrary code on an affected system or cause an affected system to crash and reload. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS3: 9.8
github
больше 3 лет назад
Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker or an authenticated, local attacker to execute arbitrary code on an affected system or cause an affected system to crash and reload. For more information about these vulnerabilities, see the Details section of this advisory.
EPSS
Процентиль: 95%
0.16401
Средний
9.8 Critical
CVSS3
10 Critical
CVSS2