IO
Product
IOS
On CISA KEVExploited in the wild
618
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 134Medium 81Low 1
Watch
Add IOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0167 In wildKEV | 8.8 | Mar 28 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Affected: 5.2.0.base; through 15.6.3m1; through 15.2\(6\)e0a; through 15.2\(4a\)ea5 |
| CVE-2017-6738 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.2(53)SE1; 12.2(55)SE; 12.2(50)SE2; 12.2(50)SE1; 12.2(50)SE5; 12.2(53)SE; +34 more |
| CVE-2017-6737 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.1(3)XI; 12.2(4)B; 12.2(15)B; 12.2(16)B1; 12.2(4)B7; 12.2(4)B2; +34 more |
| CVE-2017-6742 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.0 through 12.4; 15.0 through 15.6 |
| CVE-2017-6736 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.1(3a)XI9; 12.1(3)XI; 12.1(3a)XI8; 12.1(3a)XI3; 12.1(3a)XI1; 12.1(3a)XI7; +34 more |
| CVE-2017-6744 In wildKEV | 8.8 | Jul 17 | Cisco IOS Software SNMP Remote Code Execution Vulnerability Affected: 12.1(3)XI; 12.2(1b)DA; 12.2(5)DA; 12.2(7)DA; 12.2(12)DA; 12.2(10)DA5; +34 more |
| CVE-2017-6743 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.1(3)XI; 12.2(1b)DA; 12.2(5)DA; 12.2(7)DA; 12.2(12)DA; 12.2(10)DA5; +34 more |
| CVE-2017-6740 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.2(14)ZA; 12.2(14)ZA3; 12.2(14)ZA2; 12.2(14)ZA5; 12.2(14)ZA4; 12.2(14)ZA6; +34 more |
| CVE-2017-6739 In wildKEV | 8.8 | Jul 17 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Affected: 12.0 through 12.4; 15.0 through 15.6 |
| CVE-2018-0172 In wildKEV | 8.6 | Mar 28 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Affected: All versions, or not specified |
| CVE-2018-0158 In wildKEV | 8.6 | Mar 28 | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability Affected: 15.5(3)s1.1; 15.5(3)s1.2; 15.5(3)s1.4; 15.5(3)s1.5; 15.5(3)s1.7; 15.5(3)s1.8; +14 more |
| CVE-2018-0155 In wildKEV | 8.6 | Mar 28 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability Affected: 3.6(2)e; 3.6(2)e |
| CVE-2018-0174 In wildKEV | 8.6 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability Affected: 12.2(33)sre7a; through 15.2\(4a\)ea5; through 15.2\(6\)e0a |
| CVE-2018-0173 In wildKEV | 8.6 | Mar 28 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Affected: denali-16.3.4; through 15.2\(6\)e0a; through 15.2\(4a\)ea5 |
| CVE-2008-4128 In wildKEV | 8.1 | Sep 18 | Cisco IOS Cross-Site Request Forgery Vulnerability Affected: 12.4 |
| CVE-2018-0175 In wildKEV | 8.0 | Mar 28 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Affected: 15.4(3)m4.1; through 15.2\(4a\)ea5; through 15.2\(6\)e0a; through 15.6.3m1 |
| CVE-2025-20352 In wildKEV | 7.7 | Sep 24 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Affected: 12.2(55)SE; 12.2(55)SE3; 12.2(55)SE2; 12.2(58)SE; 12.2(55)SE1; 12.2(58)SE1; +34 more |
| CVE-2018-0154 In wildKEV | 7.5 | Mar 28 | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability Affected: All versions, or not specified |
| CVE-2018-0159 In wildKEV | 7.5 | Mar 28 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability Affected: 15.3(3)s |
| CVE-2018-0156 In wildKEV | 7.5 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability Affected: 15.2(2)e4; 15.2(2a)ja |
| CVE-2017-12233 In wildKEV | 7.5 | Sep 28 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Affected: 12.4 through 15.6 |
| CVE-2017-12231 In wildKEV | 7.5 | Sep 28 | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability Affected: 12.4 through 15.6 |
| CVE-2017-12237 In wildKEV | 7.5 | Sep 28 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability Affected: 15.0 through 15.6 |
| CVE-2017-12235 In wildKEV | 7.5 | Sep 28 | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability Affected: 12.2 through 15.6 |
| CVE-2017-12234 In wildKEV | 7.5 | Sep 28 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Affected: 12.4 through 15.6 |
| CVE-2017-6627 In wildKEV | 7.5 | Sep 7 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability Affected: 15.1(2)gc; 15.1(2)gc1; 15.1(2)gc2; 15.1(4)gc; 15.1(4)gc1; 15.1(4)gc2; +29 more |
| CVE-2016-6415 In wildKEV | 7.5 | Sep 19 | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability Affected: 12.2 through 12.4; 15.0 through 15.6 |
| CVE-2019-16009 | 8.8 | Sep 23 | A vulnerability in the web UI of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an… Affected: before 16.1.1 |
| CVE-2020-3234 | 8.8 | Jun 3 | A vulnerability in the virtual console authentication of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series… Affected: 12.2(60)ez16; 15.0(2)sg11a; 15.3(3)jaa1; 15.3(3)jpj; 15.4(1)cg; 15.4(2)cg; +34 more |
| CVE-2020-3217 | 8.8 | Jun 3 | A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software… Affected: 12.2(6)i1; 12.4(25e)jao7; 15.0(2)sg11a; 15.1(3)svr1; 15.2(1)sy; 15.2(1)sy0a; +34 more |
| CVE-2020-3205 | 8.8 | Jun 3 | A vulnerability in the implementation of the inter-VM channel of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000… Affected: 12.2(60)ez16; 15.0(2)sg11a; 15.2(4)jaz1; 15.3(3)jaa1; 15.3(3)jpi; 15.3(3)jpj; +34 more |
| CVE-2020-3199 | 8.8 | Jun 3 | Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected… Affected: 12.2(60)ez16; 15.0(2)sg11a; 15.3(3)jaa1; 15.3(3)jpj; 15.4(1)cg; 15.4(2)cg; +34 more |
| CVE-2019-12651 | 8.8 | Sep 25 | Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated… Affected: 16.11.1 |
| CVE-2019-12650 | 8.8 | Sep 25 | Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated… Affected: 16.11.1 |
| CVE-2019-12648 | 8.8 | Sep 25 | A vulnerability in the IOx application environment for Cisco IOS Software could allow an authenticated, remote attacker to gain unauthorized access to the Guest Operating System… Affected: 15.7(3)m3 |
| CVE-2018-0255 | 8.8 | Apr 19 | A vulnerability in the device manager web interface of Cisco Industrial Ethernet Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… Affected: 15.2(5)e |
| CVE-2026-20301 | 8.6 | Aug 5 | Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability Affected: 15.2(7)E7; 15.2(8)E3; 15.7(3)M10; 15.8(3)M9; 15.9(3)M7; 15.2(7)E8; +34 more |
| CVE-2026-20012 | 8.6 | Mar 25 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA)… Affected: 15.2(1)S; 15.2(2)S; 15.2(1)S1; 15.2(4)S; 15.2(1)S2; 15.2(2)S1; +34 more |
| CVE-2025-20154 | 8.6 | May 7 | A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker… Affected: through 15.9\(3\)m11 |
| CVE-2022-20697 | 8.6 | Apr 15 | A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS)… Affected: 15.1(3)svr1; 15.1(3)svr2; 15.1(3)svr3; 15.1(3)svs; 15.1(3)svs1; 15.1(3)svt1; +20 more |
| CVE-2020-3408 | 8.6 | Sep 24 | A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload,… Affected: 15.8(3)m3 |
| CVE-2020-3228 | 8.6 | Jun 3 | A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote… Affected: 12.2(6)i1; 15.1(1)sy; 15.1(1)sy1; 15.1(1)sy2; 15.1(1)sy3; 15.1(1)sy4; +34 more |
| CVE-2020-3226 | 8.6 | Jun 3 | A vulnerability in the Session Initiation Protocol (SIP) library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a… Affected: 15.0(2)sg11a; 15.3(3)jaa1; 15.3(3)jpi; 15.3(3)jpj; 15.3(3)m; 15.3(3)m1; +34 more |
| CVE-2020-3225 | 8.6 | Jun 3 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,… Affected: 12.2(44)ex; 12.2(44)ex1; 12.2(46)se1; 12.2(46)se2; 12.2(50)se; 12.2(50)se1; +34 more |
| CVE-2019-1747 | 8.6 | Mar 28 | A vulnerability in the implementation of the Short Message Service (SMS) handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,… Affected: 15.8(3)m |
| CVE-2019-1740 | 8.6 | Mar 28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 15.3(3)jd; 15.3(3)jd2; 15.3(3)jd3; 15.3(3)jd4; 15.3(3)jd5; 15.3(3)jd6; +34 more |
| CVE-2019-1737 | 8.6 | Mar 27 | A vulnerability in the processing of IP Service Level Agreement (SLA) packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to… Affected: 12.2(58)ex; 12.2(58)ez; 12.2(60)ez; 12.2(60)ez1; 12.2(60)ez2; 12.2(60)ez3; +34 more |
| CVE-2018-15377 | 8.6 | Oct 5 | A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an… Affected: 15.7(3.1s)m; denali-16.3.6; everest-16.5.1 |
| CVE-2018-0485 | 8.6 | Oct 5 | A vulnerability in the SM-1T3/E3 firmware on Cisco Second Generation Integrated Services Routers (ISR G2) and the Cisco 4451-X Integrated Services Router (ISR4451-X) could allow… Affected: 15.6(3)m |
| CVE-2018-0473 | 8.6 | Oct 5 | A vulnerability in the Precision Time Protocol (PTP) subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… Affected: 15.2(4)e; 15.2(5) |
The 500 most important CVEs for this product (exploited first, then by severity)