IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0470 | 8.6 | Oct 5 | A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulting… Affected: 16.2.0; 16.3(1) |
| CVE-2018-0467 | 8.6 | Oct 5 | A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload Affected: 15.6(2)sp; 16.6.1; everest-16.6.1 |
| CVE-2018-0164 | 8.6 | Mar 28 | A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an interface queue wedge Affected: 15.6(2)sp |
| CVE-2018-0157 | 8.6 | Mar 28 | A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload Affected: 16.4.1; 16.4.2; 16.5.1; 16.5.1b; 16.6.1; 16.6.1a |
| CVE-2017-3863 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 3.2.1sg; 3.2.8sg; 3.3.1sg; 3.3.1sq; 3.4.1sg; 3.4.2sg; +18 more |
| CVE-2017-3862 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 3.2.1sg; 3.2.8sg; 3.3.1sg; 3.3.1sq; 3.4.1sg; 3.4.2sg; +18 more |
| CVE-2017-3861 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 3.2.1sg; 3.2.8sg; 3.3.1sg; 3.3.1sq; 3.4.1sg; 3.4.2sg; +18 more |
| CVE-2017-3860 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 3.2.1sg; 3.2.8sg; 3.3.1sg; 3.3.1sq; 3.4.1sg; 3.4.2sg; +18 more |
| CVE-2017-3864 | 8.6 | Mar 22 | A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenticated, remote… Affected: 3.3 through 3.7 |
| CVE-2019-1950 | 8.4 | Feb 19 | A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device Affected: through 16.11 |
| CVE-2025-20200 | 8.2 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0sg; +34 more |
| CVE-2025-20199 | 8.2 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.1se; +34 more |
| CVE-2025-20198 | 8.2 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.7.0e; 3.7.1e; 3.7.2e; 3.7.3e; 3.7.4e; 3.7.5e; +34 more |
| CVE-2025-20197 | 8.2 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.7.0bs; 3.7.0s; 3.7.1as; 3.7.1s; 3.7.2s; 3.7.2ts; +34 more |
| CVE-2025-20160 | 8.1 | Sep 24 | A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive… Affected: 3.8.6e; 3.8.7e; 3.8.8e; 3.8.9e; 3.8.10e; 3.10.1e; +34 more |
| CVE-2021-1433 | 8.1 | Mar 24 | A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device Affected: 3.15.1xbs; 3.15.2xbs; 16.12.1; 16.12.1a; 16.12.1c; 16.12.1s; +17 more |
| CVE-2020-3474 | 8.1 | Sep 24 | Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read… Affected: All versions, or not specified |
| CVE-2018-15372 | 8.1 | Oct 5 | A vulnerability in the MACsec Key Agreement (MKA) using Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) functionality of Cisco IOS XE Software could allow an… Affected: 16.8.1; 16.9.1 |
| CVE-2016-6380 | 8.1 | Oct 5 | The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or… Affected: 3.1.0s; 3.1.0sg; 3.1.1s; 3.1.1sg; 3.1.2s; 3.1.3as; +34 more |
| CVE-2023-20065 | 7.8 | Mar 23 | A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected… Affected: 17.6.3; 17.11.1 |
| CVE-2023-20029 | 7.8 | Mar 23 | A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device Affected: 17.7.1; 17.8.1 |
| CVE-2022-20681 | 7.8 | Apr 15 | A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local… Affected: 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; 16.11.1s; 16.11.2; +34 more |
| CVE-2021-1529 | 7.8 | Oct 21 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges Affected: 16.12 through 17.0; 17.2 before 17.2.3; 17.3 before 17.3.4; 17.4 before 17.4.2; 17.5 before 17.5.1a; 17.6.0 |
| CVE-2021-1442 | 7.8 | Mar 24 | A vulnerability in a diagnostic command for the Plug-and-Play (PnP) subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to the… Affected: 3.6.3e; 3.6.4e; 3.6.5ae; 3.6.5be; 3.6.5e; 3.6.6e; +34 more |
| CVE-2021-1392 | 7.8 | Mar 24 | A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial… Affected: 3.3.0xo; 3.3.1xo; 3.3.2xo; 3.6.5be; 3.7.4e; 3.7.5e; +23 more |
| CVE-2020-3404 | 7.8 | Sep 24 | A vulnerability in the persistent Telnet/Secure Shell (SSH) CLI of Cisco IOS XE Software could allow an authenticated, local attacker to gain shell access on an affected device… Affected: 16.11.1 |
| CVE-2020-3403 | 7.8 | Sep 24 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to inject a command to the underlying operating system that will execute with root… Affected: 17.2.1 |
| CVE-2020-3393 | 7.8 | Sep 24 | A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device Affected: 16.12.1 |
| CVE-2019-16011 | 7.8 | Apr 29 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges Affected: 16.10.2; 16.11 |
| CVE-2019-12671 | 7.8 | Sep 25 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to gain shell access on an affected device and execute commands on the underlying… Affected: 16.11.1; 16.11.1 |
| CVE-2019-1745 | 7.8 | Mar 28 | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with elevated privileges Affected: 3.6.10e; 3.10.0s; 3.10.1s; 3.10.2as; 3.10.2s; 3.10.2ts; +34 more |
| CVE-2018-0194 | 7.8 | Apr 2 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected… Affected: before 16.3.1 |
| CVE-2018-0193 | 7.8 | Mar 28 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected… Affected: before 16.3.1 |
| CVE-2018-0185 | 7.8 | Mar 28 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected… Affected: before 16.3.1 |
| CVE-2018-0182 | 7.8 | Mar 28 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected… Affected: before 16.3.1 |
| CVE-2018-0176 | 7.8 | Mar 28 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device… Affected: 15.0(5.59)emd; 16.1(0); 16.2(0) |
| CVE-2026-20124 | 7.7 | Aug 5 | Cisco IOS XE Software SNMP Denial of Service Vulnerability Affected: 3.13.9s; 3.13.10s; 3.16.6bs; 3.16.7as; 3.16.7bs; 3.16.7s; +34 more |
| CVE-2025-20312 | 7.7 | Sep 24 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service… Affected: 17.2.1; 17.2.1a; 17.2.1r; 17.2.1v; 17.2.2; 17.2.3; +34 more |
| CVE-2025-20192 | 7.7 | May 7 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service… Affected: 3.13.0s; 3.13.1s; 3.13.2s; 3.13.3s; 3.13.4s; 3.13.5s; +34 more |
| CVE-2025-20176 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.3.0se; 3.3.1se; 3.3.2se; 3.3.3se; 3.3.4se; 3.3.5se; +34 more |
| CVE-2025-20175 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2025-20174 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.11.0s; 3.11.1s; 3.11.2s; 3.11.3s; 3.11.4s; 3.12.0as; +34 more |
| CVE-2025-20173 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2025-20172 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0sg; +34 more |
| CVE-2025-20171 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2025-20170 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2025-20169 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2022-20920 | 7.7 | Oct 10 | Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.2se; 3.3.0se; +34 more |
| CVE-2022-20679 | 7.7 | Apr 15 | A vulnerability in the IPSec decryption routine of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a… Affected: 3.15.1xbs; 3.15.2xbs; 16.8.1; 16.8.1a; 16.8.1b; 16.8.1c; +34 more |
| CVE-2021-34699 | 7.7 | Sep 23 | A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload Affected: 3.3.0se; 3.3.0xo; 3.3.1se; 3.3.1xo; 3.3.2se; 3.3.2xo; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)