IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3393 | 7.8 | Sep 24 | A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device Affected: 16.12.1 |
| CVE-2019-16011 | 7.8 | Apr 29 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges Affected: 16.10.2; 16.11 |
| CVE-2019-12671 | 7.8 | Sep 25 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to gain shell access on an affected device and execute commands on the underlying… Affected: 16.11.1; 16.11.1 |
| CVE-2019-1745 | 7.8 | Mar 28 | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with elevated privileges Affected: 3.6.10e; 3.10.0s; 3.10.1s; 3.10.2as; 3.10.2s; 3.10.2ts; +34 more |
| CVE-2018-0194 | 7.8 | Apr 2 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected… Affected: before 16.3.1 |
| CVE-2018-0193 | 7.8 | Mar 28 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected… Affected: before 16.3.1 |
| CVE-2018-0185 | 7.8 | Mar 28 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected… Affected: before 16.3.1 |
| CVE-2018-0182 | 7.8 | Mar 28 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected… Affected: before 16.3.1 |
| CVE-2018-0176 | 7.8 | Mar 28 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device… Affected: 15.0(5.59)emd; 16.1(0); 16.2(0) |
| CVE-2026-20124 | 7.7 | Aug 5 | Cisco IOS XE Software SNMP Denial of Service Vulnerability Affected: 3.13.9s; 3.13.10s; 3.16.6bs; 3.16.7as; 3.16.7bs; 3.16.7s; +34 more |
| CVE-2025-20312 | 7.7 | Sep 24 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service… Affected: 17.2.1; 17.2.1a; 17.2.1r; 17.2.1v; 17.2.2; 17.2.3; +34 more |
| CVE-2025-20192 | 7.7 | May 7 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service… Affected: 3.13.0s; 3.13.1s; 3.13.2s; 3.13.3s; 3.13.4s; 3.13.5s; +34 more |
| CVE-2025-20169 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2025-20175 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2025-20174 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.11.0s; 3.11.1s; 3.11.2s; 3.11.3s; 3.11.4s; 3.12.0as; +34 more |
| CVE-2025-20170 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2025-20171 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2025-20176 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.3.0se; 3.3.1se; 3.3.2se; 3.3.3se; 3.3.4se; 3.3.5se; +34 more |
| CVE-2025-20172 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0sg; +34 more |
| CVE-2025-20173 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2022-20920 | 7.7 | Oct 10 | Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.2se; 3.3.0se; +34 more |
| CVE-2022-20679 | 7.7 | Apr 15 | A vulnerability in the IPSec decryption routine of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a… Affected: 3.15.1xbs; 3.15.2xbs; 16.8.1; 16.8.1a; 16.8.1b; 16.8.1c; +34 more |
| CVE-2021-34699 | 7.7 | Sep 23 | A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload Affected: 3.3.0se; 3.3.0xo; 3.3.1se; 3.3.1xo; 3.3.2se; 3.3.2xo; +34 more |
| CVE-2021-1623 | 7.7 | Sep 23 | A vulnerability in the Simple Network Management Protocol (SNMP) punt handling function of Cisco cBR-8 Converged Broadband Routers could allow an authenticated, remote attacker to… Affected: before 17.6.1a |
| CVE-2021-1620 | 7.7 | Sep 23 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated,… Affected: 3.8.0e; 3.8.1e; 3.8.2e; 3.8.3e; 3.8.4e; 3.8.5ae; +34 more |
| CVE-2020-3235 | 7.7 | Jun 3 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an… Affected: 3.2.0sg; 3.2.1sg; 3.2.2sg; 3.2.3sg; 3.2.4sg; 3.2.5sg; +34 more |
| CVE-2020-3232 | 7.7 | Jun 3 | A vulnerability in the Simple Network Management Protocol (SNMP) implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an… Affected: 3.16.0s; 3.16.1as; 3.16.2as; 3.16.3as; 3.16.4bs; 3.16.4s; +34 more |
| CVE-2020-3200 | 7.7 | Jun 3 | A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0sg; +34 more |
| CVE-2024-20436 | 7.5 | Sep 25 | A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial… Affected: 3.9.0as; 3.9.1s; 3.9.2s; 3.10.0s; 3.10.1s; 3.10.2s; +34 more |
| CVE-2024-20433 | 7.5 | Sep 25 | A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an… Affected: 3.3.0sg; 3.3.1sg; 3.3.2sg; 3.4.0sg; 3.4.1sg; 3.4.2sg; +34 more |
| CVE-2024-20308 | 7.5 | Mar 27 | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow,… Affected: 3.3.0sg; 3.3.1sg; 3.3.2sg; 3.4.0sg; 3.4.1sg; 3.4.2sg; +34 more |
| CVE-2024-20307 | 7.5 | Mar 27 | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting… Affected: 3.4.8sg; 3.7.4e; 3.7.5e; 3.8.2e; 3.8.3e; 3.8.4e; +34 more |
| CVE-2024-20314 | 7.5 | Mar 27 | A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU… Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2024-20311 | 7.5 | Mar 27 | A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an… Affected: 3.7.0bs; 3.7.0s; 3.7.1as; 3.7.1s; 3.7.2s; 3.7.2ts; +34 more |
| CVE-2023-20227 | 7.5 | Sep 27 | A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 16.8.1; 16.8.1a; 16.8.1b; 16.8.1c; 16.8.1d; 16.8.1e; +34 more |
| CVE-2023-20226 | 7.5 | Sep 27 | A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an… Affected: 17.7.1; 17.7.1a; 17.7.2; 17.8.1; 17.8.1a; 17.9.1; +5 more |
| CVE-2023-20187 | 7.5 | Sep 27 | A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an… Affected: 3.7.1s; 3.7.2s; 3.7.2ts; 3.7.3s; 3.7.4s; 3.7.5s; +34 more |
| CVE-2023-20080 | 7.5 | Mar 23 | A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial… Affected: 3.3.0xo; 3.3.1xo; 3.3.2xo; 3.4.0sg; 3.4.1sg; 3.4.2sg; +34 more |
| CVE-2022-20919 | 7.5 | Sep 30 | Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability Affected: 17.9.1 |
| CVE-2022-20856 | 7.5 | Sep 30 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability Affected: 17.3.4c |
| CVE-2022-20848 | 7.5 | Sep 30 | Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability Affected: 17.6.1; 17.6.3; 17.9.1 |
| CVE-2022-20847 | 7.5 | Sep 30 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability Affected: 17.3.3 |
| CVE-2022-20678 | 7.5 | Apr 15 | A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of… Affected: 16.9.6; 16.12.4; 16.12.5; 17.3.3 |
| CVE-2021-34769 | 7.5 | Sep 23 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless… Affected: 3.15.1xbs; 3.15.2xbs; 17.3.1; 17.3.2; 17.3.2a; 17.4.1; +1 more |
| CVE-2021-34768 | 7.5 | Sep 23 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless… Affected: 3.15.1xbs; 3.15.2xbs; 17.3.1; 17.3.2; 17.3.2a; 17.4.1; +1 more |
| CVE-2021-1446 | 7.5 | Mar 24 | A vulnerability in the DNS application layer gateway (ALG) functionality used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote… Affected: 3.7.0bs; 3.7.0s; 3.7.0xas; 3.7.0xbs; 3.7.1as; 3.7.1s; +34 more |
| CVE-2021-1431 | 7.5 | Mar 24 | A vulnerability in the vDaemon process of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting a denial of service… Affected: 3.15.1xbs; 3.15.2xbs; 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; +26 more |
| CVE-2021-1223 | 7.5 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… Affected: before 17.4.1 |
| CVE-2020-3444 | 7.5 | Nov 6 | A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters Affected: through 16.12.2r; 17.2 through 17.2.1 |
| CVE-2020-3479 | 7.5 | Sep 24 | A vulnerability in the implementation of Multiprotocol Border Gateway Protocol (MP-BGP) for the Layer 2 VPN (L2VPN) Ethernet VPN (EVPN) address family in Cisco IOS Software and… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)