IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1373 | 8.6 | Mar 24 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000… Affected: 16.10.1; 16.10.1e; 16.10.1s; 16.11.1; 16.11.1a; 16.11.1b; +19 more |
| CVE-2020-3527 | 8.6 | Sep 24 | A vulnerability in the Polaris kernel of Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to crash the device Affected: 16.9.0 before 16.9.5; 16.12.0 before 16.12.3 |
| CVE-2020-3526 | 8.6 | Sep 24 | A vulnerability in the Common Open Policy Service (COPS) engine of Cisco IOS XE Software on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker… Affected: 17.2 |
| CVE-2020-3510 | 8.6 | Sep 24 | A vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to trigger a… Affected: 16.12.1; 16.12.2; 17.1.1 |
| CVE-2020-3509 | 8.6 | Sep 24 | A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the… Affected: 16.7(1) |
| CVE-2020-3492 | 8.6 | Sep 24 | A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers and Cisco AireOS Software for Cisco… Affected: 16.12.1 |
| CVE-2020-3480 | 8.6 | Sep 24 | Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop… Affected: All versions, or not specified |
| CVE-2020-3414 | 8.6 | Sep 24 | A vulnerability in the packet processing of Cisco IOS XE Software for Cisco 4461 Integrated Services Routers could allow an unauthenticated, remote attacker to cause an affected… Affected: 16.9.2; 16.10.4; 16.11.2; 16.12.3; 17.1.1 |
| CVE-2020-3408 | 8.6 | Sep 24 | A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload,… Affected: 15.8(3)m3 |
| CVE-2020-3407 | 8.6 | Sep 24 | A vulnerability in the RESTCONF and NETCONF-YANG access control list (ACL) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to… Affected: 15.8(3)m3 |
| CVE-2020-3399 | 8.6 | Sep 24 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers… Affected: 16.12; 16.12.1s; 16.12.2 |
| CVE-2020-3359 | 8.6 | Sep 24 | A vulnerability in the multicast DNS (mDNS) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to… Affected: 16.12.1 |
| CVE-2020-3228 | 8.6 | Jun 3 | A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote… Affected: 3.3.0se; 3.3.0xo; 3.3.1se; 3.3.1xo; 3.3.2se; 3.3.2xo; +34 more |
| CVE-2020-3226 | 8.6 | Jun 3 | A vulnerability in the Session Initiation Protocol (SIP) library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a… Affected: 3.10.0s; 3.10.1s; 3.10.2as; 3.10.2s; 3.10.2ts; 3.10.3s; +34 more |
| CVE-2020-3225 | 8.6 | Jun 3 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,… Affected: 3.3.0xo; 3.3.1xo; 3.3.2xo; 3.6.5be; 3.8.9e; 3.8.10e; +28 more |
| CVE-2020-3221 | 8.6 | Jun 3 | A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated,… Affected: 16.10.1; 16.10.1a; 16.10.1b; 16.10.1e; 16.10.1s; 16.10.2; +10 more |
| CVE-2020-3203 | 8.6 | Jun 3 | A vulnerability in the locally significant certificate (LSC) provisioning feature of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could… Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2019-12663 | 8.6 | Sep 25 | A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause… Affected: 16.6.4; 16.12.1 |
| CVE-2019-1747 | 8.6 | Mar 28 | A vulnerability in the implementation of the Short Message Service (SMS) handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,… Affected: 16.10.1 |
| CVE-2019-1740 | 8.6 | Mar 28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 3.2.0ja; 3.16.0as; 3.16.0bs; 3.16.0cs; 3.16.0s; 3.16.1as; +34 more |
| CVE-2019-1737 | 8.6 | Mar 27 | A vulnerability in the processing of IP Service Level Agreement (SLA) packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0xo; +34 more |
| CVE-2018-0485 | 8.6 | Oct 5 | A vulnerability in the SM-1T3/E3 firmware on Cisco Second Generation Integrated Services Routers (ISR G2) and the Cisco 4451-X Integrated Services Router (ISR4451-X) could allow… Affected: All versions, or not specified |
| CVE-2018-0472 | 8.6 | Oct 5 | A vulnerability in the IPsec driver code of multiple Cisco IOS XE Software platforms and the Cisco ASA 5500-X Series Adaptive Security Appliance (ASA) could allow an… Affected: 15.5(3)s5.36; 16.8.1 |
| CVE-2018-0470 | 8.6 | Oct 5 | A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulting… Affected: 16.2.0; 16.3(1) |
| CVE-2018-0467 | 8.6 | Oct 5 | A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload Affected: 15.6(2)sp; 16.6.1; everest-16.6.1 |
| CVE-2018-0164 | 8.6 | Mar 28 | A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an interface queue wedge Affected: 15.6(2)sp |
| CVE-2018-0157 | 8.6 | Mar 28 | A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload Affected: 16.4.1; 16.4.2; 16.5.1; 16.5.1b; 16.6.1; 16.6.1a |
| CVE-2017-3863 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 3.2.1sg; 3.2.8sg; 3.3.1sg; 3.3.1sq; 3.4.1sg; 3.4.2sg; +18 more |
| CVE-2017-3862 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 3.2.1sg; 3.2.8sg; 3.3.1sg; 3.3.1sq; 3.4.1sg; 3.4.2sg; +18 more |
| CVE-2017-3861 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 3.2.1sg; 3.2.8sg; 3.3.1sg; 3.3.1sq; 3.4.1sg; 3.4.2sg; +18 more |
| CVE-2017-3860 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 3.2.1sg; 3.2.8sg; 3.3.1sg; 3.3.1sq; 3.4.1sg; 3.4.2sg; +18 more |
| CVE-2017-3864 | 8.6 | Mar 22 | A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenticated, remote… Affected: 3.3 through 3.7 |
| CVE-2019-1950 | 8.4 | Feb 19 | A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device Affected: through 16.11 |
| CVE-2025-20200 | 8.2 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0sg; +34 more |
| CVE-2025-20199 | 8.2 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.1se; +34 more |
| CVE-2025-20198 | 8.2 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.7.0e; 3.7.1e; 3.7.2e; 3.7.3e; 3.7.4e; 3.7.5e; +34 more |
| CVE-2025-20197 | 8.2 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.7.0bs; 3.7.0s; 3.7.1as; 3.7.1s; 3.7.2s; 3.7.2ts; +34 more |
| CVE-2025-20160 | 8.1 | Sep 24 | A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive… Affected: 3.8.6e; 3.8.7e; 3.8.8e; 3.8.9e; 3.8.10e; 3.10.1e; +34 more |
| CVE-2021-1433 | 8.1 | Mar 24 | A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device Affected: 3.15.1xbs; 3.15.2xbs; 16.12.1; 16.12.1a; 16.12.1c; 16.12.1s; +17 more |
| CVE-2020-3474 | 8.1 | Sep 24 | Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read… Affected: All versions, or not specified |
| CVE-2018-15372 | 8.1 | Oct 5 | A vulnerability in the MACsec Key Agreement (MKA) using Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) functionality of Cisco IOS XE Software could allow an… Affected: 16.8.1; 16.9.1 |
| CVE-2016-6380 | 8.1 | Oct 5 | The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or… Affected: 3.1.0s; 3.1.0sg; 3.1.1s; 3.1.1sg; 3.1.2s; 3.1.3as; +34 more |
| CVE-2023-20065 | 7.8 | Mar 23 | A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected… Affected: 17.6.3; 17.11.1 |
| CVE-2023-20029 | 7.8 | Mar 23 | A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device Affected: 17.7.1; 17.8.1 |
| CVE-2022-20681 | 7.8 | Apr 15 | A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local… Affected: 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; 16.11.1s; 16.11.2; +34 more |
| CVE-2021-1529 | 7.8 | Oct 21 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges Affected: 16.12 through 17.0; 17.2 before 17.2.3; 17.3 before 17.3.4; 17.4 before 17.4.2; 17.5 before 17.5.1a; 17.6.0 |
| CVE-2021-1442 | 7.8 | Mar 24 | A vulnerability in a diagnostic command for the Plug-and-Play (PnP) subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to the… Affected: 3.6.3e; 3.6.4e; 3.6.5ae; 3.6.5be; 3.6.5e; 3.6.6e; +34 more |
| CVE-2021-1392 | 7.8 | Mar 24 | A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial… Affected: 3.3.0xo; 3.3.1xo; 3.3.2xo; 3.6.5be; 3.7.4e; 3.7.5e; +23 more |
| CVE-2020-3404 | 7.8 | Sep 24 | A vulnerability in the persistent Telnet/Secure Shell (SSH) CLI of Cisco IOS XE Software could allow an authenticated, local attacker to gain shell access on an affected device… Affected: 16.11.1 |
| CVE-2020-3403 | 7.8 | Sep 24 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to inject a command to the underlying operating system that will execute with root… Affected: 17.2.1 |
The 500 most important CVEs for this product (exploited first, then by severity)