漏洞标题
N/A
漏洞描述信息
Cisco ASR 900 Series路由器的Transaction Language 1(TL1)代码的一个漏洞可能导致未验证的远程攻击者使受影响的系统重新加载或远程执行代码。此漏洞影响运行以下 Cisco IOS XE软件版本之一的 Cisco ASR 900 Series 聚合服务路由器(ASR902, ASR903 和 ASR907):3.17.0S 3.17.1S 3.17.2S 3.18.0S 3.18.1S。更多信息:CSCuy15175。已知受影响的发布:15.6(1)S 15.6(2)S。已知固定的发布:15.6(1)S2.12 15.6(1.17)S0.41 15.6(1.17)SP 15.6(2)SP 16.4(0.183) 16.5(0.10)。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers (ASR902, ASR903, and ASR907) that are running the following releases of Cisco IOS XE Software: 3.17.0S 3.17.1S 3.17.2S 3.18.0S 3.18.1S. More Information: CSCuy15175. Known Affected Releases: 15.6(1)S 15.6(2)S. Known Fixed Releases: 15.6(1)S2.12 15.6(1.17)S0.41 15.6(1.17)SP 15.6(2)SP 16.4(0.183) 16.5(0.10).
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Cisco ASR 900 Series 缓冲区溢出漏洞
漏洞描述信息
Cisco ASR 900 Series routers是美国思科(Cisco)公司的ASR 900系列路由器产品。 Cisco ASR 900 Series路由器的Transaction Language 1代码存在缓冲区溢出漏洞。远程攻击者可通过发送恶意的请求到TL1端口利用该漏洞执行任意代码,完全控制系统或造成受影响的系统重载。以下产品和版本受到影响:Cisco ASR 900 Series Aggregation Services Routers(ASR902,ASR903和ASR907)运行的C
CVSS信息
N/A
漏洞类别
授权问题