IO
Product
IOS
On CISA KEVExploited in the wild
618
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 134Medium 81Low 1
Watch
Add IOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0171 In wildKEV | 9.8 | Mar 28 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability Affected: 15.2(5)e |
| CVE-2017-12240 In wildKEV | 9.8 | Sep 28 | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability Affected: 12.2 through 15.6 |
| CVE-2017-3881 In wildKEV | 9.8 | Mar 17 | Cisco IOS and IOS XE Remote Code Execution Vulnerability Affected: 12.2s through 15.1\(3\)svs |
| CVE-2018-0167 In wildKEV | 8.8 | Mar 28 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Affected: 5.2.0.base; through 15.6.3m1; through 15.2\(6\)e0a; through 15.2\(4a\)ea5 |
| CVE-2017-6738 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.2(53)SE1; 12.2(55)SE; 12.2(50)SE2; 12.2(50)SE1; 12.2(50)SE5; 12.2(53)SE; +34 more |
| CVE-2017-6737 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.1(3)XI; 12.2(4)B; 12.2(15)B; 12.2(16)B1; 12.2(4)B7; 12.2(4)B2; +34 more |
| CVE-2017-6742 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.0 through 12.4; 15.0 through 15.6 |
| CVE-2017-6736 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.1(3a)XI9; 12.1(3)XI; 12.1(3a)XI8; 12.1(3a)XI3; 12.1(3a)XI1; 12.1(3a)XI7; +34 more |
| CVE-2017-6744 In wildKEV | 8.8 | Jul 17 | Cisco IOS Software SNMP Remote Code Execution Vulnerability Affected: 12.1(3)XI; 12.2(1b)DA; 12.2(5)DA; 12.2(7)DA; 12.2(12)DA; 12.2(10)DA5; +34 more |
| CVE-2017-6743 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.1(3)XI; 12.2(1b)DA; 12.2(5)DA; 12.2(7)DA; 12.2(12)DA; 12.2(10)DA5; +34 more |
| CVE-2017-6740 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.2(14)ZA; 12.2(14)ZA3; 12.2(14)ZA2; 12.2(14)ZA5; 12.2(14)ZA4; 12.2(14)ZA6; +34 more |
| CVE-2017-6739 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.0 through 12.4; 15.0 through 15.6 |
| CVE-2018-0172 In wildKEV | 8.6 | Mar 28 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Affected: All versions, or not specified |
| CVE-2018-0158 In wildKEV | 8.6 | Mar 28 | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability Affected: 15.5(3)s1.1; 15.5(3)s1.2; 15.5(3)s1.4; 15.5(3)s1.5; 15.5(3)s1.7; 15.5(3)s1.8; +14 more |
| CVE-2018-0155 In wildKEV | 8.6 | Mar 28 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability Affected: 3.6(2)e; 3.6(2)e |
| CVE-2018-0174 In wildKEV | 8.6 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability Affected: 12.2(33)sre7a; through 15.2\(4a\)ea5; through 15.2\(6\)e0a |
| CVE-2018-0173 In wildKEV | 8.6 | Mar 28 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Affected: denali-16.3.4; through 15.2\(6\)e0a; through 15.2\(4a\)ea5 |
| CVE-2008-4128 In wildKEV | 8.1 | Sep 18 | Cisco IOS Cross-Site Request Forgery Vulnerability Affected: 12.4 |
| CVE-2018-0175 In wildKEV | 8.0 | Mar 28 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Affected: 15.4(3)m4.1; through 15.2\(4a\)ea5; through 15.2\(6\)e0a; through 15.6.3m1 |
| CVE-2025-20352 In wildKEV | 7.7 | Sep 24 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Affected: 12.2(55)SE; 12.2(55)SE3; 12.2(55)SE2; 12.2(58)SE; 12.2(55)SE1; 12.2(58)SE1; +34 more |
| CVE-2018-0154 In wildKEV | 7.5 | Mar 28 | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability Affected: All versions, or not specified |
| CVE-2018-0159 In wildKEV | 7.5 | Mar 28 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability Affected: 15.3(3)s |
| CVE-2018-0156 In wildKEV | 7.5 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability Affected: 15.2(2)e4; 15.2(2a)ja |
| CVE-2017-12233 In wildKEV | 7.5 | Sep 28 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Affected: 12.4 through 15.6 |
| CVE-2017-12231 In wildKEV | 7.5 | Sep 28 | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability Affected: 12.4 through 15.6 |
| CVE-2017-12237 In wildKEV | 7.5 | Sep 28 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability Affected: 15.0 through 15.6 |
| CVE-2017-12235 In wildKEV | 7.5 | Sep 28 | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability Affected: 12.2 through 15.6 |
| CVE-2017-12234 In wildKEV | 7.5 | Sep 28 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Affected: 12.4 through 15.6 |
| CVE-2017-6627 In wildKEV | 7.5 | Sep 7 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability Affected: 15.1(2)gc; 15.1(2)gc1; 15.1(2)gc2; 15.1(4)gc; 15.1(4)gc1; 15.1(4)gc2; +29 more |
| CVE-2016-6415 In wildKEV | 7.5 | Sep 19 | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability Affected: 12.2 through 12.4; 15.0 through 15.6 |
| CVE-2023-20109 In wildKEV | 6.6 | Sep 27 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Affected: 12.4(24)T; 12.4(24)T3; 12.4(22)T1; 12.4(24)T5; 12.4(24)T4; 12.4(22)T; +34 more |
| CVE-2017-12232 In wildKEV | 6.5 | Sep 28 | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability Affected: 15.0 through 15.6 |
| CVE-2017-12238 In wildKEV | 6.5 | Sep 28 | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability Affected: 15.0 through 15.4 |
| CVE-2017-6663 In wildKEV | 6.5 | Aug 7 | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability Affected: 15.2(3)e; 15.2(3)e1; 15.2(3)e2; 15.2(3)e3; 15.2(3)e4; 15.2(3)e5; +34 more |
| CVE-2018-0161 In wildKEV | 6.3 | Mar 28 | Cisco IOS Software Resource Management Errors Vulnerability Affected: 15.2(5)e |
| CVE-2018-0179 In wildKEV | 5.9 | Mar 28 | Cisco IOS Software Denial-of-Service Vulnerability Affected: 15.3(00.00.19)sy; 15.4(01)ia001.100; 15.6(01.22)t; 15.3(00.00.19)sy; 15.4(03)m4.1; 15.4(2)cg; +2 more |
| CVE-2018-0180 In wildKEV | 5.9 | Mar 28 | Cisco IOS Software Denial-of-Service Vulnerability Affected: 15.3(00.00.19)sy; 15.4(01)ia001.100; 15.6(01.22)t; 15.3(00.00.19)sy; 15.4(03)m4.1; 15.4(2)cg; +2 more |
| CVE-2017-12319 In wildKEV | 5.9 | Mar 27 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability Affected: 15.4(1)s |
| CVE-2004-1464 In wildKEV | 5.9 | Dec 31 | Cisco IOS Denial-of-Service Vulnerability Affected: through 12.2\(15\)zj3 |
Showing 39
The 500 most important CVEs for this product (exploited first, then by severity)
