漏洞标题
Cisco IOS和IOS XE软件即插即用代理内存泄漏漏洞
漏洞描述信息
Cisco网络即插即用代理（也称为Cisco开放式即插即用代理）在Cisco IOS软件和Cisco IOS XE软件中存在一个漏洞，未经身份验证的远程攻击者可能利用该漏洞在受影响设备上引发内存泄露。该漏洞是由于受影响软件对输入验证不足所致。攻击者可能通过向受影响设备上的Cisco网络即插即用代理发送无效数据来利用此漏洞。成功利用该漏洞可能使攻击者能够在受影响设备上引发内存泄露，从而导致设备重新加载。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
漏洞类别
N/A
漏洞标题
Cisco IOS and IOS XE Software Plug and Play Agent Memory Leak Vulnerability
漏洞描述信息
A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by sending invalid data to the Cisco Network Plug and Play agent on an affected device. A successful exploit could allow the attacker to cause a memory leak on the affected device, which could cause the device to reload.
CVSS信息
N/A
漏洞类别
未加控制的资源消耗(资源穷尽)
漏洞标题
Cisco IOS Software和IOS XE Software 资源管理错误漏洞
漏洞描述信息
Cisco IOS Software和IOS XE Software都是美国思科（Cisco）公司为其网络设备开发的操作系统。 Cisco IOS Software和IOS XE Software中的Network Plug and Play代理存在内存泄露漏洞，该漏洞源于受影响的设备没有充分地验证输入。远程攻击者可通过发送无效的数据利用该漏洞造成内存泄露，导致拒绝服务。
CVSS信息
N/A
漏洞类别
资源管理错误