IX
Product
Ios XE Sd-wan
On CISA KEVExploited in the wild
26
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 11Medium 10Low 0
Watch
Add Ios XE Sd-wan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20352 In wildKEV | 7.7 | Sep 24 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Affected: 16.9.1; 16.9.2; 16.9.3; 16.9.4; 16.10.1; 16.10.2; +15 more |
| CVE-2021-34727 | 9.8 | Sep 23 | A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device Affected: All versions, or not specified |
| CVE-2021-1301 | 9.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device Affected: All versions, or not specified |
| CVE-2021-1300 | 9.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device Affected: All versions, or not specified |
| CVE-2020-3375 | 9.8 | Jul 31 | A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device Affected: through 16.9.0; 16.12.0 through 16.12.4; 17.2.0 through 17.2.1 |
| CVE-2021-1619 | 9.1 | Sep 23 | A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass NETCONF or… Affected: All versions, or not specified |
| CVE-2024-20455 | 8.6 | Sep 25 | A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an… Affected: 17.5.1a; 17.6.1a; 17.6.2; 17.6.4; 17.7.1a; 17.8.1a; +8 more |
| CVE-2021-1279 | 8.6 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: All versions, or not specified |
| CVE-2021-1274 | 8.6 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: All versions, or not specified |
| CVE-2021-1273 | 8.6 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: All versions, or not specified |
| CVE-2023-20035 | 7.8 | Mar 23 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges Affected: All versions, or not specified |
| CVE-2021-1529 | 7.8 | Oct 21 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges Affected: 17.2.1r and later |
| CVE-2021-1241 | 7.5 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: All versions, or not specified |
| CVE-2021-1278 | 7.5 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: All versions, or not specified |
| CVE-2021-1432 | 7.3 | Mar 24 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the… Affected: All versions, or not specified |
| CVE-2022-20850 | 7.1 | Sep 30 | Cisco SD-WAN Arbitrary File Deletion Vulnerability Affected: before 16.10.1 |
| CVE-2020-3216 | 6.8 | Jun 3 | A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an… Affected: 16.9.0; 16.9.1; 16.9.2; 16.9.3; 16.9.4; 16.10.0; +1 more |
| CVE-2021-34729 | 6.7 | Sep 23 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands with elevated… Affected: through 17.3.1a |
| CVE-2021-34725 | 6.7 | Sep 23 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on… Affected: through 17.2.1r |
| CVE-2021-1454 | 6.7 | Mar 24 | Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges Affected: All versions, or not specified |
| CVE-2021-1383 | 6.7 | Mar 24 | Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges Affected: All versions, or not specified |
| CVE-2021-1371 | 6.6 | Mar 24 | A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative… Affected: 17.2.0 |
| CVE-2021-34724 | 6.0 | Sep 23 | A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to elevate privileges and execute arbitrary code on the underlying operating… Affected: through 17.3.1a |
| CVE-2024-20373 | 5.3 | Nov 15 | A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) IPv4 access control list (ACL) feature of Cisco IOS Software and Cisco IOS XE Software could… Affected: 16.9.3; 16.9.4; 16.10.1; 16.10.2; 16.10.3; 16.10.3a; +14 more |
| CVE-2025-20151 | 4.3 | May 7 | A vulnerability in the implementation of the Simple Network Management Protocol Version 3 (SNMPv3) feature of Cisco IOS Software and Cisco IOS XE Software could allow an… Affected: 16.9.1; 16.9.2; 16.9.3; 16.9.4; 16.10.1; 16.10.2; +24 more |
| CVE-2021-1305 | 4.3 | Jan 20 | Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify… Affected: All versions, or not specified |
Showing 26