Cisco Catalyst 6500 vulnerabilities

27 CVEs affecting Cisco Catalyst 6500, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-5037, published 2014-04-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-4661, published 2012-10-29. High severity, CVSS 9.0. EPSS: 4% chance of exploitation in the next 30 days. Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices,…
CVE-2012-0355, published 2012-03-15. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(2.11) and 8.5 before 8.5(1.4)…
CVE-2011-3304, published 2011-10-06. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.2(5.3), 8.0 before 8.0(5.25), 8.1 before…
CVE-2012-4659, published 2012-10-29. High severity, CVSS 7.1. EPSS: 2.6% chance of exploitation in the next 30 days. The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices,…
CVE-2012-0354, published 2012-03-15. High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days. The Threat Detection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.0 through 8.2…
CVE-2012-0353, published 2012-03-15. High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days. The UDP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.0 before…
CVE-2007-5134, published 2007-09-27. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send packets to an…
CVE-2012-0356, published 2012-03-15. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.2(5.7), 8.0 before…
CVE-2005-4258, published 2005-12-15. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set…
CVE-2012-3058, published 2012-06-20. High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(4.1), 8.5 before 8.5(1.11), and…

Latest

CVE-2012-5037, published 2014-04-23. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service (device reload) via a "no object-group" command followed by an…
CVE-2014-2124, published 2014-03-21. High severity, CVSS 7.1. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst 6500 devices, allows remote attackers to cause a denial of service (device crash) via crafted multicast…
CVE-2012-4663, published 2012-10-29. High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days. The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before…
CVE-2012-4662, published 2012-10-29. High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days. The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before…
CVE-2012-4660, published 2012-10-29. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before…
CVE-2012-4643, published 2012-10-29. High severity, CVSS 7.1. EPSS: 1.5% chance of exploitation in the next 30 days. The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1…