IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20109 In wildKEV | 6.6 | Sep 27 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Affected: 3.3.0sg; 3.3.1sg; 3.3.2sg; 3.4.0sg; 3.4.1sg; 3.4.2sg; +34 more |
| CVE-2017-6663 In wildKEV | 6.5 | Aug 7 | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability Affected: 3.7.0e; 3.7.1e; 3.7.3e; 3.8.0e; 3.8.0ex; 3.8.1e; +34 more |
| CVE-2017-12319 In wildKEV | 5.9 | Mar 27 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability Affected: Cisco IOS XE |
| CVE-2023-20100 | 6.8 | Mar 23 | A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol of Cisco IOS XE Software for Wireless LAN… Affected: 17.10.1 |
| CVE-2023-20082 | 6.8 | Mar 23 | A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated… Affected: before 17.3.7; 17.4 before 17.6.5; 17.7 |
| CVE-2022-20944 | 6.8 | Oct 10 | Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-20694 | 6.8 | Apr 15 | A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause… Affected: 3.7.0bs; 3.7.0s; 3.7.0xas; 3.7.0xbs; 3.7.1as; 3.7.1s; +34 more |
| CVE-2021-1453 | 6.8 | Mar 24 | A vulnerability in the software image verification functionality of Cisco IOS XE Software for the Cisco Catalyst 9000 Family of switches could allow an unauthenticated, physical… Affected: 3.15.1xbs; 3.15.2xbs; 16.6.1; 16.6.2; 16.6.3; 16.6.4; +34 more |
| CVE-2021-1398 | 6.8 | Mar 24 | A vulnerability in the boot logic of Cisco IOS XE Software could allow an authenticated, local attacker with level 15 privileges or an unauthenticated attacker with physical… Affected: 3.7.0bs; 3.7.0s; 3.7.0xas; 3.7.0xbs; 3.7.1as; 3.7.1s; +34 more |
| CVE-2020-3220 | 6.8 | Jun 3 | A vulnerability in the hardware crypto driver of Cisco IOS XE Software for Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers could allow… Affected: 16.4.1; 16.4.2; 16.4.3; 16.5.1; 16.5.1a; 16.5.1b; +34 more |
| CVE-2020-3209 | 6.8 | Jun 3 | A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacker to install and boot a malicious software image or execute… Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2018-0282 | 6.8 | Jan 10 | A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload Affected: All versions, or not specified |
| CVE-2018-15369 | 6.8 | Oct 5 | A vulnerability in the TACACS+ client subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to… Affected: All versions, or not specified |
| CVE-2018-0469 | 6.8 | Oct 5 | A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload Affected: 16.5.1 |
| CVE-2017-12239 | 6.8 | Sep 29 | A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged Broadband Routers could allow an… Affected: 3.13.0as; 3.13.0s; 3.13.1s; 3.13.2as; 3.13.2s; 3.13.3s; +34 more |
| CVE-2017-3824 | 6.8 | Feb 3 | A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the device to reload,… Affected: 3.16.0; 3.16.1; 3.17.0 |
| CVE-2025-20338 | 6.7 | Sep 24 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the… Affected: 3.5.0e; 3.5.0sq; 3.5.1e; 3.5.1sq; 3.5.2e; 3.5.2sq; +34 more |
| CVE-2025-20313 | 6.7 | Sep 24 | Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to… Affected: 17.3.1; 17.3.1a; 17.3.1w; 17.3.1x; 17.3.1z; 17.3.2; +34 more |
| CVE-2025-20201 | 6.7 | May 7 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0sg; +34 more |
| CVE-2024-20306 | 6.7 | Mar 27 | A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands as root… Affected: 17.10.1; 17.10.1a; 17.10.1b; 17.11.1; 17.11.1a; 17.11.99sw; +3 more |
| CVE-2023-20097 | 6.7 | Mar 23 | A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges Affected: before 16.12.8; 17.1 before 17.3.6; 17.4 before 17.6.5; 17.7 before 17.9.2 |
| CVE-2022-20855 | 6.7 | Sep 30 | Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability Affected: 17.6.1 |
| CVE-2022-20727 | 6.7 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 16.3.1; 16.3.1a; 16.3.2; 16.3.3; 16.3.4; 16.3.5; +34 more |
| CVE-2022-20676 | 6.7 | Apr 15 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to… Affected: 16.12.1z2; 17.2.1; 17.2.1a; 17.2.1r; 17.2.1v; 17.2.2; +23 more |
| CVE-2021-34729 | 6.7 | Sep 23 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands with elevated… Affected: through 17.3.1a |
| CVE-2021-34723 | 6.7 | Sep 23 | A vulnerability in a specific CLI command that is run on Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the… Affected: 17.3.1a; 17.3.1a; 17.3.1a; 17.3.1a |
| CVE-2021-1376 | 6.7 | Mar 24 | Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could… Affected: 16.5.1; 16.5.1a; 16.6.1; 16.6.2; 16.6.3; 16.6.4; +34 more |
| CVE-2021-1375 | 6.7 | Mar 24 | Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could… Affected: 16.5.1; 16.5.1a; 16.6.1; 16.6.2; 16.6.3; 16.6.4; +31 more |
| CVE-2021-1281 | 6.7 | Mar 24 | A vulnerability in CLI management in Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system as the root user Affected: 16.9.1; 16.9.2; 16.9.3; 16.9.4; 16.10.1; 16.10.1a; +34 more |
| CVE-2021-1454 | 6.7 | Mar 24 | Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges Affected: All versions, or not specified |
| CVE-2021-1441 | 6.7 | Mar 24 | A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integrated Services Routers and Cisco ESR6300 Embedded Series… Affected: 3.15.1xbs; 3.15.2xbs; 16.9.1; 16.9.1c; 16.10.1; 16.10.1e; +21 more |
| CVE-2021-1391 | 6.7 | Mar 24 | A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege Affected: 3.9.0e; 3.9.1e; 3.9.2be; 3.9.2e; 3.10.0ce; 3.10.0e; +34 more |
| CVE-2021-1390 | 6.7 | Mar 24 | A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code on an affected device Affected: 16.8.1; 16.8.1a; 16.8.1b; 16.8.1c; 16.8.1d; 16.8.1e; +34 more |
| CVE-2021-1383 | 6.7 | Mar 24 | Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges Affected: 16.9.1; 16.9.2; 16.9.3; 16.9.4; 16.10.1; 16.10.1a; +34 more |
| CVE-2021-1382 | 6.7 | Mar 24 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root privileges on the… Affected: before 17.3.3; 17.4.1 through 17.4.2; 17.5.0 before 17.5.1a; 17.6.0 before 17.6.1a |
| CVE-2020-3513 | 6.7 | Sep 24 | Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cisco ASR 900 Series Aggregation Services Routers with a Route… Affected: 16.12.1; 17.2 |
| CVE-2020-3423 | 6.7 | Sep 24 | A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code… Affected: All versions, or not specified |
| CVE-2020-3417 | 6.7 | Sep 24 | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to execute persistent code at boot time and break the chain of trust Affected: 3.18.0sp; 3.18.1asp; 3.18.1bsp; 3.18.1csp; 3.18.1gsp; 3.18.1hsp; +34 more |
| CVE-2020-3416 | 6.7 | Sep 24 | Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cisco ASR 900 Series Aggregation Services Routers with a Route… Affected: 16.12.1; 17.2 |
| CVE-2020-3215 | 6.7 | Jun 3 | A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local attacker to gain root-level privileges on an affected device Affected: 3.7.0e; 3.7.1e; 3.7.2e; 3.7.3e; 3.7.4e; 3.7.5e; +34 more |
| CVE-2020-3214 | 6.7 | Jun 3 | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a user with root-level privileges Affected: 16.11.1; 16.11.1a; 16.11.1b; 16.11.1c; 16.11.1s; 16.11.2; +7 more |
| CVE-2020-3213 | 6.7 | Jun 3 | A vulnerability in the ROMMON of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to those of the root user of the underlying operating… Affected: 3.8.0s; 3.8.1s; 3.8.2s; 3.9.0as; 3.9.0s; 3.9.1as; +34 more |
| CVE-2020-3207 | 6.7 | Jun 3 | A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticated, local attacker with root shell access to the underlying… Affected: 16.9.2; 16.9.2a; 16.9.2s; 16.9.3; 16.9.3a; 16.9.3h; +13 more |
| CVE-2020-3204 | 6.7 | Jun 3 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC… Affected: 3.2.0se; 3.2.0sg; 3.2.1se; 3.2.1sg; 3.2.2se; 3.2.2sg; +34 more |
| CVE-2019-12666 | 6.7 | Sep 25 | A vulnerability in the Guest Shell of Cisco IOS XE Software could allow an authenticated, local attacker to perform directory traversal on the base Linux operating system of Cisco… Affected: 16.4 before 16.6.5; 16.7 before 16.9.3; 16.11.1 |
| CVE-2019-12662 | 6.7 | Sep 25 | A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a… Affected: 16.8.1 |
| CVE-2019-12661 | 6.7 | Sep 25 | A vulnerability in a Virtualization Manager (VMAN) related CLI command of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands on the… Affected: 15.3(3)s; 15.4(2)s; 15.4(3)s; 15.5(1)s; 15.5(2)s; 15.5(3)s; +1 more |
| CVE-2019-12649 | 6.7 | Sep 25 | A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install and boot a malicious software image or execute… Affected: 16.8(1) |
| CVE-2019-1649 | 6.7 | May 13 | A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local… Affected: before 16.12.1; before 16.3.9; 16.4.0 before 16.6.7; 16.7.0 before 16.9.4; 16.10.0 before 16.12.1; before 16.2.1; +3 more |
| CVE-2018-15374 | 6.7 | Oct 5 | A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install a malicious software image or file on an… Affected: 16.6.1 |
The 500 most important CVEs for this product (exploited first, then by severity)