IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20066 | 6.5 | Mar 23 | Cisco IOS XE Software Web UI Path Traversal Vulnerability Affected: 16.12.3; 17.3.2; 17.6.2 |
| CVE-2022-20810 | 6.5 | Sep 30 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2022-20692 | 6.5 | Apr 15 | A vulnerability in the NETCONF over SSH feature of Cisco IOS XE Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service condition (DoS)… Affected: 3.15.1xbs; 3.15.2xbs; 16.3.1; 16.3.1a; 16.3.2; 16.3.3; +34 more |
| CVE-2022-20684 | 6.5 | Apr 15 | A vulnerability in Simple Network Management Protocol (SNMP) trap generation for wireless clients of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could… Affected: 3.15.1xbs; 3.15.2xbs; 16.6.1; 16.6.2; 16.6.3; 16.6.4; +34 more |
| CVE-2021-34703 | 6.5 | Sep 23 | A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an… Affected: through 16.12.3 |
| CVE-2021-1352 | 6.5 | Mar 24 | A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service… Affected: 16.4.1; 16.4.2; 16.4.3; 16.5.1; 16.5.1a; 16.5.1b; +34 more |
| CVE-2021-1385 | 6.5 | Mar 24 | A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks… Affected: 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; 16.11.1s; 16.11.2; +34 more |
| CVE-2020-3487 | 6.5 | Sep 24 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless… Affected: All versions, or not specified |
| CVE-2020-3486 | 6.5 | Sep 24 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless… Affected: All versions, or not specified |
| CVE-2020-3465 | 6.5 | Sep 24 | A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a device to reload Affected: 16.6.9; 17.4.1 |
| CVE-2020-3429 | 6.5 | Sep 24 | A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated,… Affected: 16.12.1s |
| CVE-2020-3428 | 6.5 | Sep 24 | A vulnerability in the WLAN Local Profiling feature of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent… Affected: All versions, or not specified |
| CVE-2019-1746 | 6.5 | Mar 28 | A vulnerability in the Cluster Management Protocol (CMP) processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to… Affected: 3.2.0sg; 3.2.1sg; 3.2.2sg; 3.2.3sg; 3.2.4sg; 3.2.5sg; +34 more |
| CVE-2018-0466 | 6.5 | Oct 5 | A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an… Affected: 16.2.1 |
| CVE-2018-0197 | 6.5 | Oct 5 | A vulnerability in the VLAN Trunking Protocol (VTP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to corrupt the… Affected: 3.2.0ja; 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; +34 more |
| CVE-2017-12222 | 6.5 | Sep 29 | A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch and result in a denial of… Affected: 16.1.1; 16.1.2; 16.1.3; 16.1.3a; 16.1.4; 16.2.1; +7 more |
| CVE-2017-6665 | 6.5 | Aug 7 | A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic… Affected: 3.7.0e; 3.7.1e; 3.7.3e; 3.8.0e; 3.8.0ex; 3.8.1e; +34 more |
| CVE-2017-3820 | 6.5 | Feb 3 | A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S,… Affected: 3.13.6s; 3.16.2s; 3.17.1s |
| CVE-2014-2146 | 6.5 | Sep 22 | The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which… Affected: through 15.4\(3\)s |
| CVE-2016-1428 | 6.5 | Jun 23 | Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service (device restart) via a sequence of crafted SNMP… Affected: 3.15.0s; 3.16.0s; 3.17.0s |
| CVE-2016-1432 | 6.5 | Jun 18 | Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service (NULL pointer dereference and card restart)… Affected: 3.15.0s; 3.15.1s; 3.16.0s |
| CVE-2015-6431 | 6.5 | Dec 23 | Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405 Affected: 16.1.1 |
| CVE-2017-6606 | 6.4 | Apr 7 | A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on… Affected: 3.1.0s; 3.1.0sg; 3.1.1s; 3.1.1sg; 3.1.2s; 3.1.3s; +34 more |
| CVE-2018-0160 | 6.3 | Mar 28 | A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS)… Affected: 15.5(3)s |
| CVE-2017-6615 | 6.3 | Apr 20 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service (DoS)… Affected: 3.16.0cs; 3.16.0s; 3.16.1as; 3.16.1s; 3.16.2s |
| CVE-2026-20104 | 6.1 | Mar 25 | A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and… Affected: 16.12.6; 16.12.6a; 16.12.7; 16.12.8; 17.3.3; 17.3.4; +34 more |
| CVE-2021-1381 | 6.1 | Mar 24 | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to… Affected: 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; 16.11.1s; 16.11.2; +30 more |
| CVE-2018-0480 | 6.1 | Oct 5 | A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of… Affected: 3.6(5) |
| CVE-2018-0190 | 6.1 | Mar 28 | Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: before 16.3.6 |
| CVE-2018-0188 | 6.1 | Mar 28 | Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: before 16.3.6 |
| CVE-2018-0186 | 6.1 | Mar 28 | Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: before 16.3.6 |
| CVE-2017-12272 | 6.1 | Oct 19 | A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of… Affected: 16.1.2; 16.2.0; 16.3(1) |
| CVE-2025-20155 | 6.0 | May 7 | A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system Affected: 17.9.4; 17.9.4a; 17.9.5; 17.9.5a; 17.9.5b; 17.9.5e; +22 more |
| CVE-2021-1434 | 6.0 | Mar 24 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system Affected: 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; 16.11.1s; 16.11.2; +21 more |
| CVE-2020-3503 | 6.0 | Sep 24 | A vulnerability in the file system permissions of Cisco IOS XE Software could allow an authenticated, local attacker to obtain read and write access to critical configuration or… Affected: 16.12.1 |
| CVE-2020-3201 | 6.0 | Jun 3 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC… Affected: 3.2.0sg; 3.2.1sg; 3.2.2sg; 3.2.3sg; 3.2.4sg; 3.2.5sg; +34 more |
| CVE-2023-20081 | 5.9 | Mar 23 | Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability Affected: 17.8.1 |
| CVE-2019-1760 | 5.9 | Mar 28 | A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload Affected: 3.2.0ja; 3.16.4as; 3.16.4bs; 3.16.4cs; 3.16.4ds; 3.16.4es; +34 more |
| CVE-2019-1757 | 5.9 | Mar 28 | A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive… Affected: 3.6.4e; 3.6.5ae; 3.6.5be; 3.6.5e; 3.6.6e; 3.6.7ae; +34 more |
| CVE-2018-0476 | 5.9 | Oct 5 | A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated,… Affected: 15.5(3)s5.1; 15.5(3)s6.1; 16.6.2 |
| CVE-2018-0131 | 5.9 | Aug 14 | A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the… Affected: 15.5(3)s |
| CVE-2017-12228 | 5.9 | Sep 29 | A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow an unauthenticated, remote attacker to… Affected: through 15.4\(3\)s; 3.3.0xo; 3.3.1xo; 3.3.2xo; 3.5.0e; 3.5.1e; +34 more |
| CVE-2017-3850 | 5.9 | Mar 21 | A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE Software (3.7 through 3.18, and 16) could allow… Affected: 3.7.0e; 3.7.1e; 3.7.2e; 3.7.3e; 3.7.4e; 3.7.5e; +34 more |
| CVE-2016-6438 | 5.9 | Oct 27 | A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity… Affected: 3.16.0cs; 3.16.0s; 3.16.1as; 3.16.1s; 3.16.2as; 3.16.2bs; +11 more |
| CVE-2016-1344 | 5.9 | Mar 26 | The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via fragmented packets,… Affected: 3.3s_3.3.0s; 3.3s_3.3.1s; 3.3s_3.3.2s; 3.3sg_3.3.0sg; 3.3sg_3.3.1sg; 3.3sg_3.3.2sg; +34 more |
| CVE-2021-34696 | 5.8 | Sep 23 | A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to… Affected: through 17.3.2 |
| CVE-2021-1625 | 5.8 | Sep 23 | A vulnerability in the Zone-Based Policy Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent the Zone-Based Policy Firewall from… Affected: before 17.3.2 |
| CVE-2021-1377 | 5.8 | Mar 24 | A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent an… Affected: 3.6.6e; 3.6.7ae; 3.6.7be; 3.6.7e; 3.6.8e; 3.6.9ae; +34 more |
| CVE-2024-20309 | 5.5 | Mar 27 | A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload or stop… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0sq; +34 more |
| CVE-2024-20324 | 5.5 | Mar 27 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords Affected: 16.10.1; 16.10.1e; 16.10.1s; 16.11.1; 16.11.1a; 16.11.1b; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)