IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1623 | 7.7 | Sep 23 | A vulnerability in the Simple Network Management Protocol (SNMP) punt handling function of Cisco cBR-8 Converged Broadband Routers could allow an authenticated, remote attacker to… Affected: before 17.6.1a |
| CVE-2021-1620 | 7.7 | Sep 23 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated,… Affected: 3.8.0e; 3.8.1e; 3.8.2e; 3.8.3e; 3.8.4e; 3.8.5ae; +34 more |
| CVE-2020-3235 | 7.7 | Jun 3 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an… Affected: 3.2.0sg; 3.2.1sg; 3.2.2sg; 3.2.3sg; 3.2.4sg; 3.2.5sg; +34 more |
| CVE-2020-3232 | 7.7 | Jun 3 | A vulnerability in the Simple Network Management Protocol (SNMP) implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an… Affected: 3.16.0s; 3.16.1as; 3.16.2as; 3.16.3as; 3.16.4bs; 3.16.4s; +34 more |
| CVE-2020-3200 | 7.7 | Jun 3 | A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0sg; +34 more |
| CVE-2024-20436 | 7.5 | Sep 25 | A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial… Affected: 3.9.0as; 3.9.1s; 3.9.2s; 3.10.0s; 3.10.1s; 3.10.2s; +34 more |
| CVE-2024-20433 | 7.5 | Sep 25 | A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an… Affected: 3.3.0sg; 3.3.1sg; 3.3.2sg; 3.4.0sg; 3.4.1sg; 3.4.2sg; +34 more |
| CVE-2024-20308 | 7.5 | Mar 27 | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow,… Affected: 3.3.0sg; 3.3.1sg; 3.3.2sg; 3.4.0sg; 3.4.1sg; 3.4.2sg; +34 more |
| CVE-2024-20307 | 7.5 | Mar 27 | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting… Affected: 3.4.8sg; 3.7.4e; 3.7.5e; 3.8.2e; 3.8.3e; 3.8.4e; +34 more |
| CVE-2024-20314 | 7.5 | Mar 27 | A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU… Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2024-20311 | 7.5 | Mar 27 | A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an… Affected: 3.7.0bs; 3.7.0s; 3.7.1as; 3.7.1s; 3.7.2s; 3.7.2ts; +34 more |
| CVE-2023-20227 | 7.5 | Sep 27 | A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 16.8.1; 16.8.1a; 16.8.1b; 16.8.1c; 16.8.1d; 16.8.1e; +34 more |
| CVE-2023-20226 | 7.5 | Sep 27 | A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an… Affected: 17.7.1; 17.7.1a; 17.7.2; 17.8.1; 17.8.1a; 17.9.1; +5 more |
| CVE-2023-20187 | 7.5 | Sep 27 | A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an… Affected: 3.7.1s; 3.7.2s; 3.7.2ts; 3.7.3s; 3.7.4s; 3.7.5s; +34 more |
| CVE-2023-20080 | 7.5 | Mar 23 | A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial… Affected: 3.3.0xo; 3.3.1xo; 3.3.2xo; 3.4.0sg; 3.4.1sg; 3.4.2sg; +34 more |
| CVE-2022-20919 | 7.5 | Sep 30 | Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability Affected: 17.9.1 |
| CVE-2022-20856 | 7.5 | Sep 30 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability Affected: 17.3.4c |
| CVE-2022-20848 | 7.5 | Sep 30 | Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability Affected: 17.6.1; 17.6.3; 17.9.1 |
| CVE-2022-20847 | 7.5 | Sep 30 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability Affected: 17.3.3 |
| CVE-2022-20678 | 7.5 | Apr 15 | A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of… Affected: 16.9.6; 16.12.4; 16.12.5; 17.3.3 |
| CVE-2021-34769 | 7.5 | Sep 23 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless… Affected: 3.15.1xbs; 3.15.2xbs; 17.3.1; 17.3.2; 17.3.2a; 17.4.1; +1 more |
| CVE-2021-34768 | 7.5 | Sep 23 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless… Affected: 3.15.1xbs; 3.15.2xbs; 17.3.1; 17.3.2; 17.3.2a; 17.4.1; +1 more |
| CVE-2021-1446 | 7.5 | Mar 24 | A vulnerability in the DNS application layer gateway (ALG) functionality used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote… Affected: 3.7.0bs; 3.7.0s; 3.7.0xas; 3.7.0xbs; 3.7.1as; 3.7.1s; +34 more |
| CVE-2021-1431 | 7.5 | Mar 24 | A vulnerability in the vDaemon process of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting a denial of service… Affected: 3.15.1xbs; 3.15.2xbs; 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; +26 more |
| CVE-2021-1223 | 7.5 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… Affected: before 17.4.1 |
| CVE-2020-3444 | 7.5 | Nov 6 | A vulnerability in the packet filtering features of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters Affected: through 16.12.2r; 17.2 through 17.2.1 |
| CVE-2020-3479 | 7.5 | Sep 24 | A vulnerability in the implementation of Multiprotocol Border Gateway Protocol (MP-BGP) for the Layer 2 VPN (L2VPN) Ethernet VPN (EVPN) address family in Cisco IOS Software and… Affected: All versions, or not specified |
| CVE-2020-3422 | 7.5 | Sep 24 | A vulnerability in the IP Service Level Agreement (SLA) responder feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the IP SLA responder to… Affected: 16.9.3 |
| CVE-2020-3421 | 7.5 | Sep 24 | Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop… Affected: 16.9.3; 17.2 |
| CVE-2020-3230 | 7.5 | Jun 3 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 3.3.0sg; 3.3.0xo; 3.3.1sg; 3.3.1xo; 3.3.2sg; 3.3.2xo; +34 more |
| CVE-2019-12664 | 7.5 | Sep 25 | A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers (ISRs) could allow an… Affected: 16.6.4 |
| CVE-2019-12659 | 7.5 | Sep 25 | A vulnerability in the HTTP server code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the HTTP server to crash Affected: 16.10.1 |
| CVE-2019-12658 | 7.5 | Sep 25 | A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resources on an affected… Affected: 16.6.1; 16.8.1 |
| CVE-2019-12657 | 7.5 | Sep 25 | A vulnerability in Unified Threat Defense (UTD) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload Affected: 16.3.6 |
| CVE-2019-12654 | 7.5 | Sep 25 | A vulnerability in the common Session Initiation Protocol (SIP) library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an… Affected: 15.6(1)s4.2; 16.3.8; 16.9.1 |
| CVE-2019-12653 | 7.5 | Sep 25 | A vulnerability in the Raw Socket Transport feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting… Affected: 16.9; 16.10.1 |
| CVE-2019-12647 | 7.5 | Sep 25 | A vulnerability in the Ident protocol handler of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload Affected: fuji-16.7.1; fuji-16.8.1 |
| CVE-2019-12646 | 7.5 | Sep 25 | A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated,… Affected: 15.4(3)s; 15.5(3)s; 15.6(1)s; 16.3.1; 16.4.1; 16.5.1; +7 more |
| CVE-2019-1752 | 7.5 | Mar 28 | A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload Affected: 3.8.0s; 3.8.1s; 3.8.2s; 3.9.0as; 3.9.0s; 3.9.1as; +34 more |
| CVE-2019-1741 | 7.5 | Mar 28 | A vulnerability in the Cisco Encrypted Traffic Analytics (ETA) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 3.2.0ja; 16.6.1; 16.6.2; 16.6.3; 16.7.1; 16.7.1a; +8 more |
| CVE-2019-1739 | 7.5 | Mar 28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 3.2.0ja; 3.16.0as; 3.16.0bs; 3.16.0cs; 3.16.0s; 3.16.1as; +34 more |
| CVE-2019-1738 | 7.5 | Mar 28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 3.2.0ja; 3.16.0as; 3.16.0bs; 3.16.0cs; 3.16.0s; 3.16.1as; +34 more |
| CVE-2018-0177 | 7.5 | Mar 28 | A vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an… Affected: denali-16.3.1; denali-16.3.3 |
| CVE-2018-0170 | 7.5 | Mar 28 | A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition,… Affected: 16.4.1 |
| CVE-2017-6664 | 7.5 | Aug 7 | A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to access the Autonomic Networking… Affected: 3.10.8as; 3.10.8s; 3.12.0s; 3.12.1s; 3.12.2s; 3.12.3s; +23 more |
| CVE-2017-3859 | 7.5 | Mar 22 | A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to… Affected: 3.13.4s; 3.13.5as; 3.13.5s; 3.13.6as; 3.13.6s; 3.14.3s; +27 more |
| CVE-2017-3857 | 7.5 | Mar 22 | A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an… Affected: 3.1.0 through 3.18.0 |
| CVE-2017-3856 | 7.5 | Mar 22 | A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affected device to reload Affected: 3.1.0s; 3.1.0sg; 3.1.1s; 3.1.1sg; 3.1.2s; 3.1.3as; +34 more |
| CVE-2016-6393 | 7.5 | Oct 5 | The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via… Affected: 2.1.0 through 3.18.0; 16.2 |
| CVE-2016-6385 | 7.5 | Oct 5 | Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service… Affected: 3.2.0ja; 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; +26 more |
The 500 most important CVEs for this product (exploited first, then by severity)