IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-15371 | 6.7 | Oct 5 | A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access… Affected: 16.3(1) |
| CVE-2018-15368 | 6.7 | Oct 5 | A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and… Affected: 15.4(3)s |
| CVE-2018-0481 | 6.7 | Oct 5 | A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device… Affected: 15.3(3)s3.16; 16.7(1); 16.7.1 |
| CVE-2018-0477 | 6.7 | Oct 5 | A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device… Affected: 15.3(3)s3.16; 16.7(1); 16.7.1 |
| CVE-2018-0184 | 6.7 | Mar 28 | A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and… Affected: 16.3 before 16.3.6; 16.6 before 16.6.2; before 3.8.6e; before 3.13.9s; before 3.16.7s |
| CVE-2018-0183 | 6.7 | Mar 28 | A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and… Affected: before 3.13.2as; before 3.13.5as; before 3.13.7as; before 3.13.9s; before 3.16.2as; before 3.16.2bs; +5 more |
| CVE-2017-6796 | 6.7 | Sep 7 | A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to inject… Affected: All versions, or not specified |
| CVE-2025-20149 | 6.5 | Sep 24 | A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly,… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0sg; +34 more |
| CVE-2025-20193 | 6.5 | May 7 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against… Affected: 17.3.1; 17.3.1a; 17.3.1w; 17.3.1x; 17.3.1z; 17.3.2; +34 more |
| CVE-2025-20190 | 6.5 | May 7 | A vulnerability in the lobby ambassador web interface of Cisco IOS XE Wireless Controller Software could allow an authenticated, remote attacker to remove arbitrary users that are… Affected: 17.6.8; 17.9.6; 17.9.6a; 17.12.1z2; 17.12.1z3; 17.15.1; +1 more |
| CVE-2024-20414 | 6.5 | Sep 25 | A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2024-20278 | 6.5 | Mar 27 | A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to root on an affected device Affected: 17.6.1; 17.6.1a; 17.6.1w; 17.6.1x; 17.6.1y; 17.6.1z; +34 more |
| CVE-2023-20202 | 6.5 | Sep 27 | A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a… Affected: 17.9.1; 17.9.1a; 17.9.1w; 17.9.1x; 17.9.1x1; 17.9.1y; +6 more |
| CVE-2023-20067 | 6.5 | Mar 23 | A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause… Affected: 16.10.1; 16.10.1e; 16.10.1s; 16.11.1; 16.11.1a; 16.11.1b; +34 more |
| CVE-2023-20066 | 6.5 | Mar 23 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a directory traversal and access resources that are outside the… Affected: 16.12.3; 17.3.2; 17.6.2 |
| CVE-2022-20810 | 6.5 | Sep 30 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2022-20692 | 6.5 | Apr 15 | A vulnerability in the NETCONF over SSH feature of Cisco IOS XE Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service condition (DoS)… Affected: 3.15.1xbs; 3.15.2xbs; 16.3.1; 16.3.1a; 16.3.2; 16.3.3; +34 more |
| CVE-2022-20684 | 6.5 | Apr 15 | A vulnerability in Simple Network Management Protocol (SNMP) trap generation for wireless clients of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could… Affected: 3.15.1xbs; 3.15.2xbs; 16.6.1; 16.6.2; 16.6.3; 16.6.4; +34 more |
| CVE-2021-34703 | 6.5 | Sep 23 | A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an… Affected: through 16.12.3 |
| CVE-2021-1352 | 6.5 | Mar 24 | A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service… Affected: 16.4.1; 16.4.2; 16.4.3; 16.5.1; 16.5.1a; 16.5.1b; +34 more |
| CVE-2021-1385 | 6.5 | Mar 24 | A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks… Affected: 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; 16.11.1s; 16.11.2; +34 more |
| CVE-2020-3487 | 6.5 | Sep 24 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless… Affected: All versions, or not specified |
| CVE-2020-3486 | 6.5 | Sep 24 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless… Affected: All versions, or not specified |
| CVE-2020-3465 | 6.5 | Sep 24 | A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a device to reload Affected: 16.6.9; 17.4.1 |
| CVE-2020-3429 | 6.5 | Sep 24 | A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated,… Affected: 16.12.1s |
| CVE-2020-3428 | 6.5 | Sep 24 | A vulnerability in the WLAN Local Profiling feature of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent… Affected: All versions, or not specified |
| CVE-2019-1746 | 6.5 | Mar 28 | A vulnerability in the Cluster Management Protocol (CMP) processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to… Affected: 3.2.0sg; 3.2.1sg; 3.2.2sg; 3.2.3sg; 3.2.4sg; 3.2.5sg; +34 more |
| CVE-2018-0466 | 6.5 | Oct 5 | A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an… Affected: 16.2.1 |
| CVE-2018-0197 | 6.5 | Oct 5 | A vulnerability in the VLAN Trunking Protocol (VTP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to corrupt the… Affected: 3.2.0ja; 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; +34 more |
| CVE-2017-12222 | 6.5 | Sep 29 | A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch and result in a denial of… Affected: 16.1.1; 16.1.2; 16.1.3; 16.1.3a; 16.1.4; 16.2.1; +7 more |
| CVE-2017-6665 | 6.5 | Aug 7 | A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic… Affected: 3.7.0e; 3.7.1e; 3.7.3e; 3.8.0e; 3.8.0ex; 3.8.1e; +34 more |
| CVE-2017-3820 | 6.5 | Feb 3 | A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S,… Affected: 3.13.6s; 3.16.2s; 3.17.1s |
| CVE-2014-2146 | 6.5 | Sep 22 | The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which… Affected: through 15.4\(3\)s |
| CVE-2016-1428 | 6.5 | Jun 23 | Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service (device restart) via a sequence of crafted SNMP… Affected: 3.15.0s; 3.16.0s; 3.17.0s |
| CVE-2016-1432 | 6.5 | Jun 18 | Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service (NULL pointer dereference and card restart)… Affected: 3.15.0s; 3.15.1s; 3.16.0s |
| CVE-2015-6431 | 6.5 | Dec 23 | Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405 Affected: 16.1.1 |
| CVE-2017-6606 | 6.4 | Apr 7 | A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on… Affected: 3.1.0s; 3.1.0sg; 3.1.1s; 3.1.1sg; 3.1.2s; 3.1.3s; +34 more |
| CVE-2018-0160 | 6.3 | Mar 28 | A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS)… Affected: 15.5(3)s |
| CVE-2017-6615 | 6.3 | Apr 20 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service (DoS)… Affected: 3.16.0cs; 3.16.0s; 3.16.1as; 3.16.1s; 3.16.2s |
| CVE-2026-20104 | 6.1 | Mar 25 | A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and… Affected: 16.12.6; 16.12.6a; 16.12.7; 16.12.8; 17.3.3; 17.3.4; +34 more |
| CVE-2021-1381 | 6.1 | Mar 24 | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to… Affected: 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; 16.11.1s; 16.11.2; +30 more |
| CVE-2018-0480 | 6.1 | Oct 5 | A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of… Affected: 3.6(5) |
| CVE-2018-0190 | 6.1 | Mar 28 | Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: before 16.3.6 |
| CVE-2018-0188 | 6.1 | Mar 28 | Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: before 16.3.6 |
| CVE-2018-0186 | 6.1 | Mar 28 | Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: before 16.3.6 |
| CVE-2017-12272 | 6.1 | Oct 19 | A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of… Affected: 16.1.2; 16.2.0; 16.3(1) |
| CVE-2025-20155 | 6.0 | May 7 | A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system Affected: 17.9.4; 17.9.4a; 17.9.5; 17.9.5a; 17.9.5b; 17.9.5e; +22 more |
| CVE-2021-1434 | 6.0 | Mar 24 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system Affected: 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; 16.11.1s; 16.11.2; +21 more |
| CVE-2020-3503 | 6.0 | Sep 24 | A vulnerability in the file system permissions of Cisco IOS XE Software could allow an authenticated, local attacker to obtain read and write access to critical configuration or… Affected: 16.12.1 |
| CVE-2020-3201 | 6.0 | Jun 3 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC… Affected: 3.2.0sg; 3.2.1sg; 3.2.2sg; 3.2.3sg; 3.2.4sg; 3.2.5sg; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)