IX
Product
Ios XE Sd-wan
On CISA KEVExploited in the wild
26
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 11Medium 10Low 0
Watch
Add Ios XE Sd-wan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3216 | 6.8 | Jun 3 | A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an… Affected: 16.9.0; 16.9.1; 16.9.2; 16.9.3; 16.9.4; 16.10.0; +1 more |
| CVE-2021-34729 | 6.7 | Sep 23 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands with elevated… Affected: through 17.3.1a |
| CVE-2021-34725 | 6.7 | Sep 23 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on… Affected: through 17.2.1r |
| CVE-2021-1454 | 6.7 | Mar 24 | Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges Affected: All versions, or not specified |
| CVE-2021-1383 | 6.7 | Mar 24 | Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges Affected: All versions, or not specified |
| CVE-2021-1371 | 6.6 | Mar 24 | A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative… Affected: 17.2.0 |
| CVE-2021-34724 | 6.0 | Sep 23 | A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to elevate privileges and execute arbitrary code on the underlying operating… Affected: through 17.3.1a |
| CVE-2024-20373 | 5.3 | Nov 15 | A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) IPv4 access control list (ACL) feature of Cisco IOS Software and Cisco IOS XE Software could… Affected: 16.9.3; 16.9.4; 16.10.1; 16.10.2; 16.10.3; 16.10.3a; +14 more |
| CVE-2025-20151 | 4.3 | May 7 | A vulnerability in the implementation of the Simple Network Management Protocol Version 3 (SNMPv3) feature of Cisco IOS Software and Cisco IOS XE Software could allow an… Affected: 16.9.1; 16.9.2; 16.9.3; 16.9.4; 16.10.1; 16.10.2; +24 more |
| CVE-2021-1305 | 4.3 | Jan 20 | Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify… Affected: All versions, or not specified |
Showing 10