IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20081 | 5.9 | Mar 23 | A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and… Affected: 17.8.1 |
| CVE-2019-1760 | 5.9 | Mar 28 | A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload Affected: 3.2.0ja; 3.16.4as; 3.16.4bs; 3.16.4cs; 3.16.4ds; 3.16.4es; +34 more |
| CVE-2019-1757 | 5.9 | Mar 28 | A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive… Affected: 3.6.4e; 3.6.5ae; 3.6.5be; 3.6.5e; 3.6.6e; 3.6.7ae; +34 more |
| CVE-2018-0476 | 5.9 | Oct 5 | A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated,… Affected: 15.5(3)s5.1; 15.5(3)s6.1; 16.6.2 |
| CVE-2018-0131 | 5.9 | Aug 14 | A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the… Affected: 15.5(3)s |
| CVE-2017-12228 | 5.9 | Sep 29 | A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow an unauthenticated, remote attacker to… Affected: through 15.4\(3\)s; 3.3.0xo; 3.3.1xo; 3.3.2xo; 3.5.0e; 3.5.1e; +34 more |
| CVE-2017-3850 | 5.9 | Mar 21 | A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE Software (3.7 through 3.18, and 16) could allow… Affected: 3.7.0e; 3.7.1e; 3.7.2e; 3.7.3e; 3.7.4e; 3.7.5e; +34 more |
| CVE-2016-6438 | 5.9 | Oct 27 | A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity… Affected: 3.16.0cs; 3.16.0s; 3.16.1as; 3.16.1s; 3.16.2as; 3.16.2bs; +11 more |
| CVE-2016-1344 | 5.9 | Mar 26 | The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via fragmented packets,… Affected: 3.3s_3.3.0s; 3.3s_3.3.1s; 3.3s_3.3.2s; 3.3sg_3.3.0sg; 3.3sg_3.3.1sg; 3.3sg_3.3.2sg; +34 more |
| CVE-2021-34696 | 5.8 | Sep 23 | A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to… Affected: through 17.3.2 |
| CVE-2021-1625 | 5.8 | Sep 23 | A vulnerability in the Zone-Based Policy Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent the Zone-Based Policy Firewall from… Affected: before 17.3.2 |
| CVE-2021-1377 | 5.8 | Mar 24 | A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent an… Affected: 3.6.6e; 3.6.7ae; 3.6.7be; 3.6.7e; 3.6.8e; 3.6.9ae; +34 more |
| CVE-2024-20324 | 5.5 | Mar 27 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords Affected: 16.10.1; 16.10.1e; 16.10.1s; 16.11.1; 16.11.1a; 16.11.1b; +34 more |
| CVE-2024-20309 | 5.5 | Mar 27 | A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload or stop… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0sq; +34 more |
| CVE-2023-20056 | 5.5 | Mar 23 | A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected… Affected: before 16.12.8; 17.1 before 17.3.6; 17.4 before 17.6.5; 17.7 before 17.9.2 |
| CVE-2019-12660 | 5.5 | Sep 25 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to write values to the underlying memory of an affected device Affected: 16.1.1 and later |
| CVE-2018-0123 | 5.5 | Feb 8 | A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to use certain diagnostic shell commands that… Affected: All versions, or not specified |
| CVE-2025-20194 | 5.4 | May 7 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against… Affected: 17.3.1; 17.3.1a; 17.3.1w; 17.3.1x; 17.3.1z; 17.3.2; +34 more |
| CVE-2025-20196 | 5.3 | May 7 | A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco… Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2024-20316 | 5.3 | Mar 27 | A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2023-20246 | 5.3 | Nov 1 | Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on… Affected: 17.12 before 17.12.2 |
| CVE-2022-20724 | 5.3 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2021-34705 | 5.3 | Sep 23 | A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass… Affected: 3.7.0bs; 3.7.0s; 3.7.0xas; 3.7.0xbs; 3.7.1as; 3.7.1s; +34 more |
| CVE-2021-1495 | 5.3 | Apr 29 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… Affected: 16.12 before 16.12.5 |
| CVE-2021-1394 | 5.3 | Mar 24 | A vulnerability in the ingress traffic manager of Cisco IOS XE Software for Cisco Network Convergence System (NCS) 520 Routers could allow an unauthenticated, remote attacker to… Affected: 16.10.1; 16.10.1a; 16.10.1b; 16.10.1c; 16.10.1d; 16.10.1e; +4 more |
| CVE-2021-1236 | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured… Affected: before 17.4.1 |
| CVE-2021-1224 | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated,… Affected: before 17.4.1 |
| CVE-2019-1759 | 5.3 | Mar 28 | A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 3.2.0ja; 16.2.1; 16.2.2; 16.3.1; 16.3.1a; 16.3.2; +34 more |
| CVE-2019-1742 | 5.3 | Mar 28 | A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access sensitive configuration information Affected: 3.2.0ja; 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; +17 more |
| CVE-2018-0189 | 5.3 | Mar 28 | A vulnerability in the Forwarding Information Base (FIB) code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, network attacker to cause a denial of… Affected: before 15.5\(3\)s5; before 15.5\(3\)m5; before 15.4\(3\)s7; before 15.4\(2\)s1; before 15.4\(1\)s1; before 15.4\(1\)s0a; +4 more |
| CVE-2017-12211 | 5.3 | Sep 7 | A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause high CPU… Affected: 3.16.1 |
| CVE-2016-1459 | 5.3 | Jul 17 | Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service (device reload) via crafted attributes in a BGP… Affected: 3.13.2s; 3.13.3s; 3.13.4s; 3.13.5s; 3.14.0s; 3.14.1s; +13 more |
| CVE-2022-20722 | 4.9 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2022-20721 | 4.9 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2020-3223 | 4.9 | Jun 3 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to read arbitrary… Affected: 16.9.4; 16.9.4c; 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; +9 more |
| CVE-2018-0196 | 4.9 | Mar 28 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to write arbitrary files to the operating system of… Affected: 16.1.2; 16.2.0; 16.3(1) |
| CVE-2022-20725 | 4.8 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2021-1374 | 4.8 | Mar 24 | A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote… Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.4s; +34 more |
| CVE-2019-12668 | 4.8 | Sep 25 | A vulnerability in the web framework code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS)… Affected: 16.1.1 before 16.3.8; 16.4.1 before 16.6.5; 16.7.1 before 16.8.2; 16.9.1 before 16.9.2; 3.6e; 3.7e; +4 more |
| CVE-2019-12667 | 4.8 | Sep 25 | A vulnerability in the web framework code of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a… Affected: 16.1.1 before 16.6.5; 16.7.1 before 16.9.2 |
| CVE-2021-27853 | 4.7 | Sep 27 | Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers Affected: 17.3.3 |
| CVE-2021-1616 | 4.7 | Sep 23 | A vulnerability in the H.323 application level gateway (ALG) used by the Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote… Affected: before 17.6.1 |
| CVE-2020-3418 | 4.7 | Sep 24 | A vulnerability in Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9800 Series Routers could allow an unauthenticated, adjacent attacker to send ICMPv6 traffic prior… Affected: 17.1.1 |
| CVE-2020-3206 | 4.7 | Jun 3 | A vulnerability in the handling of IEEE 802.11w Protected Management Frames (PMFs) of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could… Affected: 16.10.1; 16.10.1e; 16.10.1s |
| CVE-2021-1436 | 4.4 | Mar 24 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to conduct path traversal attacks and obtain read access to sensitive files… Affected: 3.15.1xbs; 3.15.2xbs; 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; +31 more |
| CVE-2019-1762 | 4.4 | Mar 28 | A vulnerability in the Secure Storage feature of Cisco IOS and IOS XE Software could allow an authenticated, local attacker to access sensitive system information on an affected… Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.4s; +22 more |
| CVE-2017-6795 | 4.4 | Sep 7 | A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to… Affected: All versions, or not specified |
| CVE-2025-20214 | 4.3 | May 7 | A vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain unauthorized read access… Affected: 17.11.1; 17.11.1a; 17.11.99sw; 17.12.1; 17.12.1a; 17.12.1w; +8 more |
| CVE-2025-20195 | 4.3 | May 7 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the… Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2024-20434 | 4.3 | Sep 25 | A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the control plane of an affected device Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.5; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)