Most recent entries from all

certa-2011-avi-540 — Une vulnérabilité dans les commutateurs Cisco Catalyst et les routeurs Cisco Integrated Services permet à une personne…

2026-11-12T14:50:23.664831+00:00

certa-2011-avi-540

fkie_cve-2011-3271

2026-11-12T14:50:23.664935+00:00

GHSA-pcxh-cf4j-89xg

2026-11-12T14:50:23.665010+00:00

gsd-2011-3271

2026-11-12T14:50:23.665057+00:00

gsd-2011-3271

VAR-201110-0246

2026-11-12T14:50:23.665085+00:00

Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code or cause a denial of service (device crash) via crafted TCP packets to port 4786, aka Bug ID CSCto10165. Cisco IOS is prone to a remote code-execution service vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges on affected devices. Successful exploits will completely compromise an affected device. This issue is tracked by Cisco Bug ID CSCto10165. Cisco's Internet Operating System (IOS) is a complex operating system optimized for Internet interconnection.

Cisco has released free software updates that address this vulnerability.

There are no workarounds available to mitigate this vulnerability other than disabling the Smart Install feature.

This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20110928-smart-install.shtml.

Note: The September 28, 2011, Cisco IOS Software Security Advisory bundled publication includes ten Cisco Security Advisories. Each advisory lists the Cisco IOS Software releases that correct the vulnerability or vulnerabilities detailed in the advisory as well as the Cisco IOS Software releases that correct all vulnerabilities in the September 2011 Bundled Publication.

Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication" at the following link:

http://www.cisco.com/web…