Login Request a demo
IO
Product
IOS
by Cisco · last CVE Aug 5, 2026
On CISA KEVExploited in the wild
618
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities618In the news2Timeline
Severity mix
Critical 8High 134Medium 81Low 1
Severity
All severities500Critical8High134Medium81Low1
Exploitation
On CISA KEV39Exploited in the wild39
Watch

Add IOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-0171
In wildKEV
9.8
99%
Mar 28
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
Affected: 15.2(5)e
CVE-2017-12240
In wildKEV
9.8
14%
Sep 28
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
Affected: 12.2 through 15.6
CVE-2017-3881
In wildKEV
9.8
99%
Mar 17
Cisco IOS and IOS XE Remote Code Execution Vulnerability
Affected: 12.2s through 15.1\(3\)svs
CVE-2018-0167
In wildKEV
8.8
3%
Mar 28
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Affected: 5.2.0.base; through 15.6.3m1; through 15.2\(6\)e0a; through 15.2\(4a\)ea5
CVE-2017-6738
In wildKEV
8.8
11%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 12.2(53)SE1; 12.2(55)SE; 12.2(50)SE2; 12.2(50)SE1; 12.2(50)SE5; 12.2(53)SE; +34 more
CVE-2017-6737
In wildKEV
8.8
45%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 12.1(3)XI; 12.2(4)B; 12.2(15)B; 12.2(16)B1; 12.2(4)B7; 12.2(4)B2; +34 more
CVE-2017-6742
In wildKEV
8.8
21%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 12.0 through 12.4; 15.0 through 15.6
CVE-2017-6736
In wildKEV
8.8
70%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 12.1(3a)XI9; 12.1(3)XI; 12.1(3a)XI8; 12.1(3a)XI3; 12.1(3a)XI1; 12.1(3a)XI7; +34 more
CVE-2017-6744
In wildKEV
8.8
7%
Jul 17
Cisco IOS Software SNMP Remote Code Execution Vulnerability
Affected: 12.1(3)XI; 12.2(1b)DA; 12.2(5)DA; 12.2(7)DA; 12.2(12)DA; 12.2(10)DA5; +34 more
CVE-2017-6743
In wildKEV
8.8
11%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 12.1(3)XI; 12.2(1b)DA; 12.2(5)DA; 12.2(7)DA; 12.2(12)DA; 12.2(10)DA5; +34 more
CVE-2017-6740
In wildKEV
8.8
11%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 12.2(14)ZA; 12.2(14)ZA3; 12.2(14)ZA2; 12.2(14)ZA5; 12.2(14)ZA4; 12.2(14)ZA6; +34 more
CVE-2017-6739
In wildKEV
8.8
11%
Jul 17
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Affected: 12.0 through 12.4; 15.0 through 15.6
CVE-2018-0172
In wildKEV
8.6
8%
Mar 28
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Affected: All versions, or not specified
CVE-2018-0158
In wildKEV
8.6
7%
Mar 28
Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
Affected: 15.5(3)s1.1; 15.5(3)s1.2; 15.5(3)s1.4; 15.5(3)s1.5; 15.5(3)s1.7; 15.5(3)s1.8; +14 more
CVE-2018-0155
In wildKEV
8.6
8%
Mar 28
Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
Affected: 3.6(2)e; 3.6(2)e
CVE-2018-0174
In wildKEV
8.6
8%
Mar 28
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
Affected: 12.2(33)sre7a; through 15.2\(4a\)ea5; through 15.2\(6\)e0a
CVE-2018-0173
In wildKEV
8.6
8%
Mar 28
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Affected: denali-16.3.4; through 15.2\(6\)e0a; through 15.2\(4a\)ea5
CVE-2008-4128
In wildKEV
8.1
34%
Sep 18
Cisco IOS Cross-Site Request Forgery Vulnerability
Affected: 12.4
CVE-2018-0175
In wildKEV
8.0
3%
Mar 28
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Affected: 15.4(3)m4.1; through 15.2\(4a\)ea5; through 15.2\(6\)e0a; through 15.6.3m1
CVE-2025-20352
In wildKEV
7.7
42%
Sep 24
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
Affected: 12.2(55)SE; 12.2(55)SE3; 12.2(55)SE2; 12.2(58)SE; 12.2(55)SE1; 12.2(58)SE1; +34 more
CVE-2018-0154
In wildKEV
7.5
7%
Mar 28
Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
Affected: All versions, or not specified
CVE-2018-0159
In wildKEV
7.5
7%
Mar 28
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
Affected: 15.3(3)s
CVE-2018-0156
In wildKEV
7.5
9%
Mar 28
Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
Affected: 15.2(2)e4; 15.2(2a)ja
CVE-2017-12233
In wildKEV
7.5
7%
Sep 28
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
Affected: 12.4 through 15.6
CVE-2017-12231
In wildKEV
7.5
7%
Sep 28
Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
Affected: 12.4 through 15.6
CVE-2017-12237
In wildKEV
7.5
7%
Sep 28
Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
Affected: 15.0 through 15.6
CVE-2017-12235
In wildKEV
7.5
7%
Sep 28
Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
Affected: 12.2 through 15.6
CVE-2017-12234
In wildKEV
7.5
7%
Sep 28
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
Affected: 12.4 through 15.6
CVE-2017-6627
In wildKEV
7.5
6%
Sep 7
Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
Affected: 15.1(2)gc; 15.1(2)gc1; 15.1(2)gc2; 15.1(4)gc; 15.1(4)gc1; 15.1(4)gc2; +29 more
CVE-2016-6415
In wildKEV
7.5
88%
Sep 19
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
Affected: 12.2 through 12.4; 15.0 through 15.6
CVE-2023-20109
In wildKEV
6.6
2%
Sep 27
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
Affected: 12.4(24)T; 12.4(24)T3; 12.4(22)T1; 12.4(24)T5; 12.4(24)T4; 12.4(22)T; +34 more
CVE-2017-12232
In wildKEV
6.5
2%
Sep 28
Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
Affected: 15.0 through 15.6
CVE-2017-12238
In wildKEV
6.5
2%
Sep 28
Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
Affected: 15.0 through 15.4
CVE-2017-6663
In wildKEV
6.5
2%
Aug 7
Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
Affected: 15.2(3)e; 15.2(3)e1; 15.2(3)e2; 15.2(3)e3; 15.2(3)e4; 15.2(3)e5; +34 more
CVE-2018-0161
In wildKEV
6.3
4%
Mar 28
Cisco IOS Software Resource Management Errors Vulnerability
Affected: 15.2(5)e
CVE-2018-0179
In wildKEV
5.9
5%
Mar 28
Cisco IOS Software Denial-of-Service Vulnerability
Affected: 15.3(00.00.19)sy; 15.4(01)ia001.100; 15.6(01.22)t; 15.3(00.00.19)sy; 15.4(03)m4.1; 15.4(2)cg; +2 more
CVE-2018-0180
In wildKEV
5.9
5%
Mar 28
Cisco IOS Software Denial-of-Service Vulnerability
Affected: 15.3(00.00.19)sy; 15.4(01)ia001.100; 15.6(01.22)t; 15.3(00.00.19)sy; 15.4(03)m4.1; 15.4(2)cg; +2 more
CVE-2017-12319
In wildKEV
5.9
5%
Mar 27
Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
Affected: 15.4(1)s
CVE-2004-1464
In wildKEV
5.9
5%
Dec 31
Cisco IOS Denial-of-Service Vulnerability
Affected: through 12.2\(15\)zj3
CVE-2020-3258
9.8
5%
Jun 3
Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers…
Affected: 15.8(3)m2; 15.8(9); 15.9
CVE-2020-3198
9.8
5%
Jun 3
Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers…
Affected: 12.2(60)ez16; 15.0(2)sg11a; 15.3(3)jaa1; 15.3(3)jpj; 15.4(1)cg; 15.4(2)cg; +34 more
CVE-2023-20186
9.1
1%
Sep 27
A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to…
Affected: 12.2(58)ex; 12.2(58)ey; 12.2(58)ey1; 12.2(58)ey2; 12.2(58)ez; 12.2(58)se; +34 more
CVE-2020-3426
9.1
2%
Sep 24
A vulnerability in the implementation of the Low Power, Wide Area (LPWA) subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers (Industrial…
Affected: All versions, or not specified
CVE-2025-20363
9.0
7%
Sep 25
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software,…
Affected: 12.2\(15\)b through 15.9\(3\)m11
CVE-2019-16009
8.8
1%
Sep 23
A vulnerability in the web UI of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an…
Affected: before 16.1.1
CVE-2020-3234
8.8
0%
Jun 3
A vulnerability in the virtual console authentication of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series…
Affected: 12.2(60)ez16; 15.0(2)sg11a; 15.3(3)jaa1; 15.3(3)jpj; 15.4(1)cg; 15.4(2)cg; +34 more
CVE-2020-3217
8.8
1%
Jun 3
A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software…
Affected: 12.2(6)i1; 12.4(25e)jao7; 15.0(2)sg11a; 15.1(3)svr1; 15.2(1)sy; 15.2(1)sy0a; +34 more
CVE-2020-3205
8.8
1%
Jun 3
A vulnerability in the implementation of the inter-VM channel of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000…
Affected: 12.2(60)ez16; 15.0(2)sg11a; 15.2(4)jaz1; 15.3(3)jaa1; 15.3(3)jpi; 15.3(3)jpj; +34 more
CVE-2020-3199
8.8
1%
Jun 3
Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected…
Affected: 12.2(60)ez16; 15.0(2)sg11a; 15.3(3)jaa1; 15.3(3)jpj; 15.4(1)cg; 15.4(2)cg; +34 more
CVE-2019-12651
8.8
3%
Sep 25
Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated…
Affected: 16.11.1
Page 1 of 10 · 500 total
12…10
The 500 most important CVEs for this product (exploited first, then by severity)