IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1356 | 4.3 | Mar 24 | Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to cause the web UI software to become… Affected: 3.15.1xbs; 3.15.2xbs; 17.1.1; 17.1.1a; 17.1.1s; 17.1.1t; +7 more |
| CVE-2021-1220 | 4.3 | Mar 24 | Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to cause the web UI software to become… Affected: 3.15.1xbs; 3.15.2xbs; 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; +29 more |
| CVE-2020-3516 | 4.3 | Sep 24 | A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web server on the device Affected: before 16.9.6; 16.12.0 before 16.12.2; 17.1.0 before 17.1.1; 17.2.1 |
| CVE-2020-3222 | 4.3 | Jun 3 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to bypass access control restrictions on an… Affected: 16.10.1; 16.10.1a; 16.10.1b; 16.10.1c; 16.10.1d; 16.10.1e; +16 more |
| CVE-2019-1761 | 4.3 | Mar 28 | A vulnerability in the Hot Standby Router Protocol (HSRP) subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to receive potentially… Affected: 3.2.0ja; 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; +34 more |
| CVE-2018-0257 | 4.3 | Apr 19 | A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an… Affected: 3.18 through 3.18.4; 16.6 through 16.6.3; after 16.7 through 16.7.2; 15.6(2)sp; 16.4; 16.5 |
| CVE-2017-12213 | 4.3 | Sep 7 | A vulnerability in the dynamic access control list (ACL) feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent… Affected: All versions, or not specified |
| CVE-2017-6770 | 4.2 | Aug 7 | Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability… Affected: 3.6.0e; 3.6.1e; 3.6.2e; 3.6.4e; 3.6.5ae; 3.6.5e; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)