Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arbitrary web script or HTML by (1) packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI /level/15/exec/-/buffers/assigned/dump; or (2) sending the router Cisco Discovery Protocol (CDP) packets with HTML payload that an administrator views via the CDP status pages. NOTE: these vectors were originally reported as being associated with the dump and packet options in /level/15/exec/-/show/buffers.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ios | Cisco | * | 12.3 (including) |
| Ios | Cisco | 12.3(1a) (including) | 12.3(1a) (including) |
| Ios | Cisco | 12.3(2)ja (including) | 12.3(2)ja (including) |
| Ios | Cisco | 12.3(2)ja5 (including) | 12.3(2)ja5 (including) |
| Ios | Cisco | 12.3(2)jk (including) | 12.3(2)jk (including) |
| Ios | Cisco | 12.3(2)jk1 (including) | 12.3(2)jk1 (including) |
| Ios | Cisco | 12.3(2)t3 (including) | 12.3(2)t3 (including) |
| Ios | Cisco | 12.3(2)t8 (including) | 12.3(2)t8 (including) |
| Ios | Cisco | 12.3(2)xa4 (including) | 12.3(2)xa4 (including) |
| Ios | Cisco | 12.3(2)xa5 (including) | 12.3(2)xa5 (including) |
| Ios | Cisco | 12.3(2)xc1 (including) | 12.3(2)xc1 (including) |
| Ios | Cisco | 12.3(2)xc2 (including) | 12.3(2)xc2 (including) |
| Ios | Cisco | 12.3(2)xc3 (including) | 12.3(2)xc3 (including) |
| Ios | Cisco | 12.3(2)xc4 (including) | 12.3(2)xc4 (including) |
| Ios | Cisco | 12.3(2)xe3 (including) | 12.3(2)xe3 (including) |
| Ios | Cisco | 12.3(2)xe4 (including) | 12.3(2)xe4 (including) |
| Ios | Cisco | 12.3(3e) (including) | 12.3(3e) (including) |
| Ios | Cisco | 12.3(3h) (including) | 12.3(3h) (including) |
| Ios | Cisco | 12.3(3i) (including) | 12.3(3i) (including) |
| Ios | Cisco | 12.3(4)eo1 (including) | 12.3(4)eo1 (including) |
| Ios | Cisco | 12.3(4)ja (including) | 12.3(4)ja (including) |
| Ios | Cisco | 12.3(4)ja1 (including) | 12.3(4)ja1 (including) |
| Ios | Cisco | 12.3(4)t (including) | 12.3(4)t (including) |
| Ios | Cisco | 12.3(4)t1 (including) | 12.3(4)t1 (including) |
| Ios | Cisco | 12.3(4)t2 (including) | 12.3(4)t2 (including) |
| Ios | Cisco | 12.3(4)t3 (including) | 12.3(4)t3 (including) |
| Ios | Cisco | 12.3(4)t4 (including) | 12.3(4)t4 (including) |
| Ios | Cisco | 12.3(4)t8 (including) | 12.3(4)t8 (including) |
| Ios | Cisco | 12.3(4)tpc11a (including) | 12.3(4)tpc11a (including) |
| Ios | Cisco | 12.3(4)xd (including) | 12.3(4)xd (including) |
| Ios | Cisco | 12.3(4)xd1 (including) | 12.3(4)xd1 (including) |
| Ios | Cisco | 12.3(4)xd2 (including) | 12.3(4)xd2 (including) |
| Ios | Cisco | 12.3(4)xe4 (including) | 12.3(4)xe4 (including) |
| Ios | Cisco | 12.3(4)xg1 (including) | 12.3(4)xg1 (including) |
| Ios | Cisco | 12.3(4)xg2 (including) | 12.3(4)xg2 (including) |
| Ios | Cisco | 12.3(4)xg4 (including) | 12.3(4)xg4 (including) |
| Ios | Cisco | 12.3(4)xg5 (including) | 12.3(4)xg5 (including) |
| Ios | Cisco | 12.3(4)xh (including) | 12.3(4)xh (including) |
| Ios | Cisco | 12.3(4)xk (including) | 12.3(4)xk (including) |
| Ios | Cisco | 12.3(4)xk1 (including) | 12.3(4)xk1 (including) |
| Ios | Cisco | 12.3(4)xk3 (including) | 12.3(4)xk3 (including) |
| Ios | Cisco | 12.3(4)xk4 (including) | 12.3(4)xk4 (including) |
| Ios | Cisco | 12.3(4)xq (including) | 12.3(4)xq (including) |
| Ios | Cisco | 12.3(4)xq1 (including) | 12.3(4)xq1 (including) |
| Ios | Cisco | 12.3(5) (including) | 12.3(5) (including) |
| Ios | Cisco | 12.3(5)b1 (including) | 12.3(5)b1 (including) |
| Ios | Cisco | 12.3(5a) (including) | 12.3(5a) (including) |
| Ios | Cisco | 12.3(5a)b (including) | 12.3(5a)b (including) |
| Ios | Cisco | 12.3(5a)b2 (including) | 12.3(5a)b2 (including) |
| Ios | Cisco | 12.3(5a)b5 (including) | 12.3(5a)b5 (including) |
| Ios | Cisco | 12.3(5b) (including) | 12.3(5b) (including) |
| Ios | Cisco | 12.3(5c) (including) | 12.3(5c) (including) |
| Ios | Cisco | 12.3(5e) (including) | 12.3(5e) (including) |
| Ios | Cisco | 12.3(5f) (including) | 12.3(5f) (including) |
| Ios | Cisco | 12.3(6) (including) | 12.3(6) (including) |
| Ios | Cisco | 12.3(6a) (including) | 12.3(6a) (including) |
| Ios | Cisco | 12.3(6d) (including) | 12.3(6d) (including) |
| Ios | Cisco | 12.3(6e) (including) | 12.3(6e) (including) |
| Ios | Cisco | 12.3(6f) (including) | 12.3(6f) (including) |
| Ios | Cisco | 12.3(7)ja (including) | 12.3(7)ja (including) |
| Ios | Cisco | 12.3(7)ja1 (including) | 12.3(7)ja1 (including) |
| Ios | Cisco | 12.3(7)jx (including) | 12.3(7)jx (including) |
| Ios | Cisco | 12.3(7)t (including) | 12.3(7)t (including) |
| Ios | Cisco | 12.3(7)t4 (including) | 12.3(7)t4 (including) |
| Ios | Cisco | 12.3(7)t8 (including) | 12.3(7)t8 (including) |
| Ios | Cisco | 12.3(7)t9 (including) | 12.3(7)t9 (including) |
| Ios | Cisco | 12.3(7)t10 (including) | 12.3(7)t10 (including) |
| Ios | Cisco | 12.3(7)t12 (including) | 12.3(7)t12 (including) |
| Ios | Cisco | 12.3(7)xi3 (including) | 12.3(7)xi3 (including) |
| Ios | Cisco | 12.3(7)xi4 (including) | 12.3(7)xi4 (including) |
| Ios | Cisco | 12.3(7)xi7 (including) | 12.3(7)xi7 (including) |
| Ios | Cisco | 12.3(7)xr3 (including) | 12.3(7)xr3 (including) |
| Ios | Cisco | 12.3(7)xr4 (including) | 12.3(7)xr4 (including) |
| Ios | Cisco | 12.3(7)xr6 (including) | 12.3(7)xr6 (including) |
| Ios | Cisco | 12.3(7.7) (including) | 12.3(7.7) (including) |
| Ios | Cisco | 12.3(8)t4 (including) | 12.3(8)t4 (including) |
| Ios | Cisco | 12.3(8)t7 (including) | 12.3(8)t7 (including) |
| Ios | Cisco | 12.3(8)t8 (including) | 12.3(8)t8 (including) |
| Ios | Cisco | 12.3(8)t9 (including) | 12.3(8)t9 (including) |
| Ios | Cisco | 12.3(8)t11 (including) | 12.3(8)t11 (including) |
| Ios | Cisco | 12.3(8)xu2 (including) | 12.3(8)xu2 (including) |
| Ios | Cisco | 12.3(8)xy4 (including) | 12.3(8)xy4 (including) |
| Ios | Cisco | 12.3(8)xy5 (including) | 12.3(8)xy5 (including) |
| Ios | Cisco | 12.3(8)xy6 (including) | 12.3(8)xy6 (including) |
| Ios | Cisco | 12.3(8)ya1 (including) | 12.3(8)ya1 (including) |
| Ios | Cisco | 12.3(8)yd (including) | 12.3(8)yd (including) |
| Ios | Cisco | 12.3(8)yf (including) | 12.3(8)yf (including) |
| Ios | Cisco | 12.3(8)yg (including) | 12.3(8)yg (including) |
| Ios | Cisco | 12.3(8)yg1 (including) | 12.3(8)yg1 (including) |
| Ios | Cisco | 12.3(8)yg2 (including) | 12.3(8)yg2 (including) |
| Ios | Cisco | 12.3(8)yg3 (including) | 12.3(8)yg3 (including) |
| Ios | Cisco | 12.3(8)yh (including) | 12.3(8)yh (including) |
| Ios | Cisco | 12.3(8)yi (including) | 12.3(8)yi (including) |
| Ios | Cisco | 12.3(8)yi1 (including) | 12.3(8)yi1 (including) |
| Ios | Cisco | 12.3(8)yi3 (including) | 12.3(8)yi3 (including) |
| Ios | Cisco | 12.3(9) (including) | 12.3(9) (including) |
| Ios | Cisco | 12.3(9a)bc (including) | 12.3(9a)bc (including) |
| Ios | Cisco | 12.3(9a)bc2 (including) | 12.3(9a)bc2 (including) |
| Ios | Cisco | 12.3(9a)bc6 (including) | 12.3(9a)bc6 (including) |
| Ios | Cisco | 12.3(9a)bc7 (including) | 12.3(9a)bc7 (including) |
| Ios | Cisco | 12.3(9d) (including) | 12.3(9d) (including) |
| Ios | Cisco | 12.3(9e) (including) | 12.3(9e) (including) |
| Ios | Cisco | 12.3(10) (including) | 12.3(10) (including) |
| Ios | Cisco | 12.3(10c) (including) | 12.3(10c) (including) |
| Ios | Cisco | 12.3(10d) (including) | 12.3(10d) (including) |
| Ios | Cisco | 12.3(10e) (including) | 12.3(10e) (including) |
| Ios | Cisco | 12.3(11) (including) | 12.3(11) (including) |
| Ios | Cisco | 12.3(11)t (including) | 12.3(11)t (including) |
| Ios | Cisco | 12.3(11)t4 (including) | 12.3(11)t4 (including) |
| Ios | Cisco | 12.3(11)t5 (including) | 12.3(11)t5 (including) |
| Ios | Cisco | 12.3(11)t6 (including) | 12.3(11)t6 (including) |
| Ios | Cisco | 12.3(11)t8 (including) | 12.3(11)t8 (including) |
| Ios | Cisco | 12.3(11)t9 (including) | 12.3(11)t9 (including) |
| Ios | Cisco | 12.3(11)xl (including) | 12.3(11)xl (including) |
| Ios | Cisco | 12.3(11)xl3 (including) | 12.3(11)xl3 (including) |
| Ios | Cisco | 12.3(11)yf (including) | 12.3(11)yf (including) |
| Ios | Cisco | 12.3(11)yf2 (including) | 12.3(11)yf2 (including) |
| Ios | Cisco | 12.3(11)yf3 (including) | 12.3(11)yf3 (including) |
| Ios | Cisco | 12.3(11)yf4 (including) | 12.3(11)yf4 (including) |
| Ios | Cisco | 12.3(11)yj (including) | 12.3(11)yj (including) |
| Ios | Cisco | 12.3(11)yk (including) | 12.3(11)yk (including) |
| Ios | Cisco | 12.3(11)yk1 (including) | 12.3(11)yk1 (including) |
| Ios | Cisco | 12.3(11)yk2 (including) | 12.3(11)yk2 (including) |
| Ios | Cisco | 12.3(11)yl (including) | 12.3(11)yl (including) |
| Ios | Cisco | 12.3(11)yn (including) | 12.3(11)yn (including) |
| Ios | Cisco | 12.3(11)yr (including) | 12.3(11)yr (including) |
| Ios | Cisco | 12.3(11)ys (including) | 12.3(11)ys (including) |
| Ios | Cisco | 12.3(11)ys1 (including) | 12.3(11)ys1 (including) |
| Ios | Cisco | 12.3(11)yw (including) | 12.3(11)yw (including) |
| Ios | Cisco | 12.3(12) (including) | 12.3(12) (including) |
| Ios | Cisco | 12.3(12b) (including) | 12.3(12b) (including) |
| Ios | Cisco | 12.3(12e) (including) | 12.3(12e) (including) |
| Ios | Cisco | 12.3(13) (including) | 12.3(13) (including) |
| Ios | Cisco | 12.3(13a) (including) | 12.3(13a) (including) |
| Ios | Cisco | 12.3(13a)bc (including) | 12.3(13a)bc (including) |
| Ios | Cisco | 12.3(13a)bc1 (including) | 12.3(13a)bc1 (including) |
| Ios | Cisco | 12.3(13b) (including) | 12.3(13b) (including) |
| Ios | Cisco | 12.3(14)t (including) | 12.3(14)t (including) |
| Ios | Cisco | 12.3(14)t2 (including) | 12.3(14)t2 (including) |
| Ios | Cisco | 12.3(14)t4 (including) | 12.3(14)t4 (including) |
| Ios | Cisco | 12.3(14)t5 (including) | 12.3(14)t5 (including) |
| Ios | Cisco | 12.3(14)ym4 (including) | 12.3(14)ym4 (including) |
| Ios | Cisco | 12.3(14)yq (including) | 12.3(14)yq (including) |
| Ios | Cisco | 12.3(14)yq1 (including) | 12.3(14)yq1 (including) |
| Ios | Cisco | 12.3(14)yq3 (including) | 12.3(14)yq3 (including) |
| Ios | Cisco | 12.3(14)yq4 (including) | 12.3(14)yq4 (including) |
| Ios | Cisco | 12.3(14)yt (including) | 12.3(14)yt (including) |
| Ios | Cisco | 12.3(14)yt1 (including) | 12.3(14)yt1 (including) |
| Ios | Cisco | 12.3(14)yu (including) | 12.3(14)yu (including) |
| Ios | Cisco | 12.3(14)yu1 (including) | 12.3(14)yu1 (including) |
| Ios | Cisco | 12.3(15) (including) | 12.3(15) (including) |
| Ios | Cisco | 12.3(15b) (including) | 12.3(15b) (including) |
| Ios | Cisco | 12.3(16) (including) | 12.3(16) (including) |
| Ios | Cisco | 12.3b (including) | 12.3b (including) |
| Ios | Cisco | 12.3bc (including) | 12.3bc (including) |
| Ios | Cisco | 12.3bw (including) | 12.3bw (including) |
| Ios | Cisco | 12.3ja (including) | 12.3ja (including) |
| Ios | Cisco | 12.3jk (including) | 12.3jk (including) |
| Ios | Cisco | 12.3jx (including) | 12.3jx (including) |
| Ios | Cisco | 12.3t (including) | 12.3t (including) |
| Ios | Cisco | 12.3tpc (including) | 12.3tpc (including) |
| Ios | Cisco | 12.3xa (including) | 12.3xa (including) |
| Ios | Cisco | 12.3xb (including) | 12.3xb (including) |
| Ios | Cisco | 12.3xc (including) | 12.3xc (including) |
| Ios | Cisco | 12.3xd (including) | 12.3xd (including) |
| Ios | Cisco | 12.3xe (including) | 12.3xe (including) |
| Ios | Cisco | 12.3xf (including) | 12.3xf (including) |
| Ios | Cisco | 12.3xg (including) | 12.3xg (including) |
| Ios | Cisco | 12.3xh (including) | 12.3xh (including) |
| Ios | Cisco | 12.3xi (including) | 12.3xi (including) |
| Ios | Cisco | 12.3xj (including) | 12.3xj (including) |
| Ios | Cisco | 12.3xk (including) | 12.3xk (including) |
| Ios | Cisco | 12.3xl (including) | 12.3xl (including) |
| Ios | Cisco | 12.3xm (including) | 12.3xm (including) |
| Ios | Cisco | 12.3xn (including) | 12.3xn (including) |
| Ios | Cisco | 12.3xq (including) | 12.3xq (including) |
| Ios | Cisco | 12.3xr (including) | 12.3xr (including) |
| Ios | Cisco | 12.3xs (including) | 12.3xs (including) |
| Ios | Cisco | 12.3xt (including) | 12.3xt (including) |
| Ios | Cisco | 12.3xu (including) | 12.3xu (including) |
| Ios | Cisco | 12.3xv (including) | 12.3xv (including) |
| Ios | Cisco | 12.3xw (including) | 12.3xw (including) |
| Ios | Cisco | 12.3xx (including) | 12.3xx (including) |
| Ios | Cisco | 12.3xy (including) | 12.3xy (including) |
| Ios | Cisco | 12.3xz (including) | 12.3xz (including) |
| Ios | Cisco | 12.3ya (including) | 12.3ya (including) |
| Ios | Cisco | 12.3yb (including) | 12.3yb (including) |
| Ios | Cisco | 12.3yc (including) | 12.3yc (including) |
| Ios | Cisco | 12.3yd (including) | 12.3yd (including) |
| Ios | Cisco | 12.3ye (including) | 12.3ye (including) |
| Ios | Cisco | 12.3yf (including) | 12.3yf (including) |
| Ios | Cisco | 12.3yg (including) | 12.3yg (including) |
| Ios | Cisco | 12.3yh (including) | 12.3yh (including) |
| Ios | Cisco | 12.3yi (including) | 12.3yi (including) |
| Ios | Cisco | 12.3yj (including) | 12.3yj (including) |
| Ios | Cisco | 12.3yk (including) | 12.3yk (including) |
| Ios | Cisco | 12.3yl (including) | 12.3yl (including) |
| Ios | Cisco | 12.3ym (including) | 12.3ym (including) |
| Ios | Cisco | 12.3yn (including) | 12.3yn (including) |
| Ios | Cisco | 12.3yq (including) | 12.3yq (including) |
| Ios | Cisco | 12.3yr (including) | 12.3yr (including) |
| Ios | Cisco | 12.3ys (including) | 12.3ys (including) |
| Ios | Cisco | 12.3yt (including) | 12.3yt (including) |
| Ios | Cisco | 12.3yu (including) | 12.3yu (including) |
| Ios | Cisco | 12.3yw (including) | 12.3yw (including) |
| Ios | Cisco | 12.3yx (including) | 12.3yx (including) |
| Ios | Cisco | 12.4 (including) | 12.4 (including) |
| Ios | Cisco | 12.4(1) (including) | 12.4(1) (including) |
| Ios | Cisco | 12.4(1b) (including) | 12.4(1b) (including) |
| Ios | Cisco | 12.4(1c) (including) | 12.4(1c) (including) |
| Ios | Cisco | 12.4(2)mr (including) | 12.4(2)mr (including) |
| Ios | Cisco | 12.4(2)mr1 (including) | 12.4(2)mr1 (including) |
| Ios | Cisco | 12.4(2)t (including) | 12.4(2)t (including) |
| Ios | Cisco | 12.4(2)t1 (including) | 12.4(2)t1 (including) |
| Ios | Cisco | 12.4(2)t2 (including) | 12.4(2)t2 (including) |
| Ios | Cisco | 12.4(2)xa (including) | 12.4(2)xa (including) |
| Ios | Cisco | 12.4(2)xb (including) | 12.4(2)xb (including) |
| Ios | Cisco | 12.4(3a) (including) | 12.4(3a) (including) |
| Ios | Cisco | 12.4(3b) (including) | 12.4(3b) (including) |
| Ios | Cisco | 12.4(4)t (including) | 12.4(4)t (including) |
| Ios | Cisco | 12.4(5) (including) | 12.4(5) (including) |
| Ios | Cisco | 12.4mr (including) | 12.4mr (including) |
| Ios | Cisco | 12.4t (including) | 12.4t (including) |
| Ios | Cisco | 12.4xa (including) | 12.4xa (including) |
| Ios | Cisco | 12.4xb (including) | 12.4xb (including) |