IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-6282 | – | Sep 26 | Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service… Affected: 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.1; 2.2.2; +34 more |
| CVE-2015-6294 | – | Sep 18 | Cisco IOS 15.2(3)E and earlier and IOS XE 3.6(2)E and earlier allow remote attackers to cause a denial of service (functionality loss) via crafted Cisco Discovery Protocol (CDP)… Affected: 3.6e.0; 3.6e.1; 3.6e.2 |
| CVE-2015-6272 | – | Aug 31 | Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service (Embedded Services… Affected: 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.1; 2.2.2; +2 more |
| CVE-2015-6271 | – | Aug 31 | Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service (Embedded Services… Affected: 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.1; 2.2.2; +10 more |
| CVE-2015-6270 | – | Aug 31 | Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted IPv6 packet, aka Bug ID… Affected: 2.2.1; 2.2.2 |
| CVE-2015-6269 | – | Aug 31 | Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted (1) IPv4 or (2) IPv6 packet,… Affected: 2.2.1; 2.2.2 |
| CVE-2015-6273 | – | Aug 29 | Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly (VFR) by certain firewall and NAT components, which allows remote… Affected: 2.2.1; 2.2.2; 2.2.3; 3.1.0s; 3.1.1s |
| CVE-2015-6268 | – | Aug 29 | Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted IPv4 UDP packet, aka Bug ID… Affected: 2.2.1; 2.2.2 |
| CVE-2015-6267 | – | Aug 29 | Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted L2TP packet, aka Bug IDs… Affected: 2.2.1; 2.2.2 |
| CVE-2015-4291 | – | Aug 1 | Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted… Affected: 2.1.0; 2.1.1; 2.1.2; 2.2.1; 2.2.2; 2.2.3; +7 more |
| CVE-2015-4293 | – | Jul 30 | The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1)… Affected: 2.1.0; 2.1.1; 2.1.2; 2.2.1; 2.2.2; 2.2.3; +23 more |
| CVE-2015-0681 | – | Jul 24 | The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x,… Affected: 2.5.0; 2.5.1; 2.5.2; 2.6.0; 2.6.1; 2.6.2; +34 more |
| CVE-2015-4243 | – | Jul 8 | The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service (device reload) by sending malformed PPPoE… Affected: 3.5.0s |
| CVE-2015-0710 | – | Apr 29 | The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service (device reload) via a series of packets that… Affected: 3.10.0s; 3.10s.01 |
| CVE-2015-0709 | – | Apr 29 | Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device crash) by leveraging knowledge of the RADIUS secret and sending crafted RADIUS… Affected: All versions, or not specified |
| CVE-2015-0708 | – | Apr 29 | Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit… Affected: 3.13s.0; 3.13s.1; 3.14s.0 |
| CVE-2015-0688 | – | Apr 4 | Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a denial of service (module… Affected: 13.10.2s |
| CVE-2015-0685 | – | Apr 3 | Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service (device hang) via crafted IP… Affected: through 3.7s.4 |
| CVE-2015-0650 | – | Mar 26 | The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S,… Affected: 3.9s.0; 3.9s.1; 3.9s.2; 3.10s.0; 3.10s.0a; 3.10s.1; +10 more |
| CVE-2015-0646 | – | Mar 26 | Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and… Affected: 3.3xo.0; 3.3xo.1; 3.3xo.2; 3.5e.0; 3.5e.1; 3.5e.2; +23 more |
| CVE-2015-0645 | – | Mar 26 | The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before… Affected: 3.1s.0; 3.1s.1; 3.1s.2; 3.1s.3; 3.1s.4; 3.1s.5; +34 more |
| CVE-2015-0644 | – | Mar 26 | AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote… Affected: 3.8s.0; 3.8s.1; 3.8s.2; 3.8s_base; 3.9s.0; 3.9s.1; +9 more |
| CVE-2015-0643 | – | Mar 26 | Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and… Affected: 3.2s.0; 3.2s.1; 3.2s.2; 3.3sg.0; 3.3sg.1; 3.3sg.2; +34 more |
| CVE-2015-0642 | – | Mar 26 | Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and… Affected: 2.5.0; 2.5.1; 3.1s.0; 3.1s.1; 3.1s.2; 3.1s.3; +34 more |
| CVE-2015-0641 | – | Mar 26 | Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows… Affected: 3.1s.0; 3.1s.1; 3.1s.2; 3.1s.3; 3.1s.4; 3.1s.5; +34 more |
| CVE-2015-0640 | – | Mar 26 | The high-speed logging (HSL) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15… Affected: 3.1s.0; 3.1s.1; 3.1s.2; 3.1s.3; 3.1s.4; 3.1s.5; +34 more |
| CVE-2015-0639 | – | Mar 26 | The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S,… Affected: 3.6s; 3.6s.0; 3.6s.1; 3.6s.2; 3.7s; 3.7s.0; +5 more |
| CVE-2015-0637 | – | Mar 26 | The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote… Affected: 3.10s.0; 3.10s.1; 3.10s.2; 3.10s.3; 3.10s.4; 3.11s.0; +7 more |
| CVE-2015-0636 | – | Mar 26 | The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote… Affected: 3.10s.4; 3.12s.0; 3.12s.1; 3.12s.2; 3.12s.3; 3.13s.0 |
| CVE-2015-0635 | – | Mar 26 | The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote… Affected: 3.10s.0; 3.10s.1; 3.10s.2; 3.10s.3; 3.10s.4; 3.10s.5; +8 more |
| CVE-2015-0598 | – | Mar 6 | The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted IPv6 Attributes in Access-Accept packets, aka… Affected: All versions, or not specified |
| CVE-2015-0632 | – | Feb 27 | Race condition in the Neighbor Discovery (ND) protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a flood of Router… Affected: All versions, or not specified |
| CVE-2014-7990 | – | Nov 7 | Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, which allows local users to… Affected: through 3.5e |
| CVE-2014-3409 | – | Oct 25 | The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of… Affected: through 3.13s |
| CVE-2014-3405 | – | Oct 10 | Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks (aka RPL) on both the Autonomic Control Plane (ACP) and external Autonomic Networking… Affected: All versions, or not specified |
| CVE-2014-3404 | – | Oct 10 | The Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid… Affected: All versions, or not specified |
| CVE-2014-3403 | – | Oct 10 | The Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted… Affected: All versions, or not specified |
| CVE-2014-3360 | – | Sep 25 | Cisco IOS 12.4 and 15.0 through 15.4 and IOS XE 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and 3.11.xS… Affected: 3.1.0s; 3.1.1s; 3.1.2s; 3.1.3s; 3.1.4s; 3.2.0s; +34 more |
| CVE-2014-3359 | – | Sep 25 | Memory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and 3.11.xS before 3.12S allows… Affected: 3.4.0s; 3.4.1s; 3.4.2s; 3.4.3s; 3.4.4s; 3.4.5s; +24 more |
| CVE-2014-3358 | – | Sep 25 | Memory leak in Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allows remote… Affected: 3.3(.0)xo; 3.3.0se; 3.3.1se; 3.5.0e; 3.5.1e; 3.11.0s |
| CVE-2014-3357 | – | Sep 25 | Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allow remote attackers to cause a… Affected: 3.3(.0)xo; 3.3.0se; 3.3.1se; 3.5.0e; 3.5.1e; 3.11.0s |
| CVE-2014-3356 | – | Sep 25 | The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows… Affected: 3.3(.0)xo; 3.6.0s; 3.6.1s; 3.6.2s; 3.7(0)s; 3.7(1)as; +11 more |
| CVE-2014-3355 | – | Sep 25 | The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows… Affected: 3.3(.0)xo; 3.6.0s; 3.6.1s; 3.6.2s; 3.7(0)s; 3.7(1)as; +11 more |
| CVE-2014-3354 | – | Sep 25 | Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS,… Affected: 2.1; 2.1.0; 2.1.1; 2.1.2; 2.2; 2.2.1; +34 more |
| CVE-2014-3327 | – | Aug 11 | The EnergyWise module in Cisco IOS 12.2, 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.2.xXO, 3.3.xSG, 3.4.xSG, and 3.5.xE before 3.5.3E allows remote attackers to cause a denial of… Affected: 3.2.00.xo.15.0(2)xo; 3.2.0xo; 3.3.0sg; 3.3.1sg; 3.4.0sg; 3.4.1sg; +6 more |
| CVE-2014-3309 | – | Jul 9 | The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass… Affected: All versions, or not specified |
| CVE-2014-3290 | – | Jun 14 | The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services… Affected: 3.12s |
| CVE-2014-3284 | – | May 25 | Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet, aka Bug ID… Affected: All versions, or not specified |
| CVE-2014-3269 | – | May 20 | The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service (device reload) by polling frequently, aka Bug ID CSCug65204 Affected: 3.5e |
| CVE-2014-3262 | – | May 16 | The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)