IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-20723 | 7.2 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2022-20720 | 7.2 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2022-20719 | 7.2 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2022-20718 | 7.2 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2022-20693 | 7.2 | Apr 15 | A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device Affected: 3.15.1xbs; 3.15.2xbs; 16.12.1; 16.12.1a; 16.12.1c; 16.12.1s; +34 more |
| CVE-2021-1443 | 7.2 | Mar 24 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying operating… Affected: 16.9.1; 16.9.1a; 16.9.1b; 16.9.1c; 16.9.1d; 16.9.1s; +34 more |
| CVE-2021-1435 | 7.2 | Mar 24 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that can be executed as the root user Affected: 16.9.1; 16.9.1a; 16.9.1b; 16.9.1c; 16.9.1d; 16.9.1s; +30 more |
| CVE-2021-1384 | 7.2 | Mar 24 | A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands into the underlying… Affected: before 16.6.9; 16.9.0 before 16.9.7; 17.3.2 before 17.3.3; 17.4.0 before 17.4.2; 17.5.0 |
| CVE-2020-3396 | 7.2 | Sep 24 | A vulnerability in the file system on the pluggable USB 3.0 Solid State Drive (SSD) for Cisco IOS XE Software could allow an authenticated, physical attacker to remove the USB 3.0… Affected: 16.12.1 |
| CVE-2020-3218 | 7.2 | Jun 3 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code with root privileges… Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.4s; +34 more |
| CVE-2020-3212 | 7.2 | Jun 3 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating… Affected: 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; 16.11.1s; 16.12.1y |
| CVE-2020-3211 | 7.2 | Jun 3 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating… Affected: 16.10.1; 16.10.1a; 16.10.1b; 16.10.1e; 16.10.1s; 16.10.2; +10 more |
| CVE-2019-1862 | 7.2 | May 13 | A vulnerability in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell… Affected: 16.3.7 |
| CVE-2019-1756 | 7.2 | Mar 28 | A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges Affected: 3.2.0ja; 16.7.1; 16.7.1a; 16.7.1b; 16.7.2; 16.7.3; +8 more |
| CVE-2019-1755 | 7.2 | Mar 28 | A vulnerability in the Web Services Management Agent (WSMA) function of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary Cisco IOS commands… Affected: 3.2.0ja; 3.6.10e; 16.1.1; 16.1.2; 16.1.3; 16.2.1; +32 more |
| CVE-2012-0384 | 7.2 | Mar 29 | Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG… Affected: 2.1; 2.1.0; 2.1.1; 2.1.2; 2.2; 2.2.1; +30 more |
The 500 most important CVEs for this product (exploited first, then by severity)