IO
Product
IOS
On CISA KEVExploited in the wild
618
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 134Medium 81Low 1
Watch
Add IOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-0577 | – | Mar 25 | Cisco IOS 12.2 through 12.4, when certain PMTUD, SNAT, or window-size configurations are used, allows remote attackers to cause a denial of service (infinite loop, and device… Affected: 12.2b; 12.2bc; 12.2bx; 12.2by; 12.2bz; 12.2cx; +34 more |
| CVE-2010-0576 | – | Mar 25 | Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching (MPLS) and… Affected: 12.0s; 12.0sl; 12.0sx; 12.0sy; 12.0sz; 12.1ax; +34 more |
| CVE-2009-2873 | – | Sep 28 | Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via… Affected: 12.0; 12.0da; 12.0db; 12.0dc; 12.0s; 12.0sc; +34 more |
| CVE-2009-2872 | – | Sep 28 | Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via a… Affected: 12.0; 12.0da; 12.0db; 12.0dc; 12.0s; 12.0sc; +34 more |
| CVE-2009-2871 | – | Sep 28 | Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service… Affected: 12.2xna; 12.2xnb; 12.2xnc; 12.2xnd; 12.4md; 12.4mr; +11 more |
| CVE-2009-2870 | – | Sep 28 | Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service (device… Affected: 12.3yk; 12.3ys; 12.3yt; 12.4gc; 12.4mr; 12.4t; +13 more |
| CVE-2009-2869 | – | Sep 28 | Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to cause a denial of service (device reload)… Affected: 12.2xna; 12.2xnb; 12.2xnc; 12.2xnd; 12.4md; 12.4t; +4 more |
| CVE-2009-2868 | – | Sep 28 | Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service (Phase 1… Affected: 12.2ex; 12.2ira; 12.2irb; 12.2irc; 12.2sb; 12.2sca; +34 more |
| CVE-2009-2867 | – | Sep 28 | Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote… Affected: 12.2xna; 12.2xnb; 12.2xnc; 12.2xnd; 12.4t; 12.4xz; +2 more |
| CVE-2009-2866 | – | Sep 28 | Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet, aka Bug ID CSCsz38104 Affected: 12.2b; 12.2bx; 12.2cz; 12.2mc; 12.2t; 12.2yh; +34 more |
| CVE-2009-2865 | – | Sep 28 | Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ,… Affected: 12.4xw; 12.4xy; 12.4xz; 12.4ya |
| CVE-2009-2863 | – | Sep 28 | Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a… Affected: 12.0xk; 12.0xr; 12.1; 12.1e; 12.1ex; 12.1t; +34 more |
| CVE-2009-2862 | – | Sep 28 | The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended… Affected: 12.2xnb; 12.2xnc; 12.2xnd; 12.4md; 12.4t; 12.4xz; +1 more |
| CVE-2009-2051 | – | Aug 27 | Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x… Affected: 12.2 through 12.4; 15.0 through 15.1 |
| CVE-2009-2049 | – | Jul 30 | Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1 through 12.2(33)SXI2, 12.2XNC before 12.2(33)XNC2,… Affected: 12.0(32)s12; 12.0(32)s13; 12.0(32)sy8; 12.0(32)sy9; 12.0(33)s3; 12.0(33)s4; +5 more |
| CVE-2009-1168 | – | Jul 30 | Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1, 12.2XNC before 12.2(33)XNC2, 12.2XND before… Affected: 12.0(32)s12; 12.0(32)s13; 12.0(32)sy8; 12.0(32)sy9; 12.0(33)s3; 12.0(33)s4; +5 more |
| CVE-2009-1220 | – | Apr 1 | Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions… Affected: 7.2(2)22 |
| CVE-2009-0637 | – | Mar 27 | The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote… Affected: 12.2; 12.2b; 12.2bc; 12.2bw; 12.2bx; 12.2by; +34 more |
| CVE-2009-0636 | – | Mar 27 | Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled, allows remote attackers to cause a denial of service (device crash) via a valid SIP… Affected: 12.0; 12.0da; 12.0db; 12.0dc; 12.0s; 12.0sc; +34 more |
| CVE-2009-0635 | – | Mar 27 | Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, allows remote attackers to… Affected: 12.4t; 12.4xz; 12.4ya |
| CVE-2009-0630 | – | Mar 27 | The (1) Cisco Unified Communications Manager Express; (2) SIP Gateway Signaling Support Over Transport Layer Security (TLS) Transport; (3) Secure Signaling and Media Encryption;… Affected: 12.0; 12.0da; 12.0db; 12.0dc; 12.0s; 12.0sc; +34 more |
| CVE-2009-0629 | – | Mar 27 | The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial Tunnel Code (aka BSTUN), (4) Native Client Interface Architecture (NCIA) support, (5)… Affected: 12.2; 12.2b; 12.2bc; 12.2bw; 12.2bx; 12.2by; +34 more |
| CVE-2009-0626 | – | Mar 27 | The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet Affected: 12.3; 12.3b; 12.3bc; 12.3bw; 12.3ja; 12.3jea; +34 more |
| CVE-2009-0631 | – | Mar 27 | Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323… Affected: 12.0; 12.0da; 12.0db; 12.0dc; 12.0s; 12.0sc; +34 more |
| CVE-2009-0471 | – | Feb 6 | Cross-site request forgery (CSRF) vulnerability in the HTTP server in Cisco IOS 12.4(23) allows remote attackers to execute arbitrary commands, as demonstrated by executing the… Affected: 12.4(23) |
| CVE-2009-0470 | – | Feb 6 | Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 12.4(23) allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the… Affected: 12.4(23) |
| CVE-2008-3821 | – | Jan 16 | Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the… Affected: 12.0; 12.0da; 12.0db; 12.0dc; 12.0s; 12.0sc; +34 more |
| CVE-2008-5230 | – | Nov 25 | The Temporal Key Integrity Protocol (TKIP) implementation in unspecified Cisco products and other vendors' products, as used in WPA and WPA2 on Wi-Fi networks, has insufficient… Affected: All versions, or not specified |
| CVE-2008-4963 | – | Nov 6 | Unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the VTP operating mode is not transparent, allows remote attackers to… Affected: All versions, or not specified |
| CVE-2008-4609 | – | Oct 20 | The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to… Affected: 4.1; 4.1.1; 4.1.2; 8.2; 8.3; 9.0; +34 more |
| CVE-2008-3813 | – | Sep 26 | Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denial of service (device reload) via a… Affected: 12.2se; 12.2sg; 12.2srb; 12.4mr; 12.4sw; 12.4t; +3 more |
| CVE-2008-3812 | – | Sep 26 | Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service (device… Affected: 12.4t; 12.4xe; 12.4xj; 12.4xk; 12.4xv; 12.4xw |
| CVE-2008-3811 | – | Sep 26 | Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via… Affected: 12.4md; 12.4mr; 12.4sw; 12.4t; 12.4xc; 12.4xe; +11 more |
| CVE-2008-3810 | – | Sep 26 | Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via… Affected: 12.4md; 12.4mr; 12.4sw; 12.4t; 12.4xc; 12.4xe; +11 more |
| CVE-2008-3809 | – | Sep 26 | Cisco IOS 12.0 through 12.4 on Gigabit Switch Router (GSR) devices (aka 12000 Series routers) allows remote attackers to cause a denial of service (device crash) via a malformed… Affected: 12.0; 12.0da; 12.0db; 12.0dc; 12.0sc; 12.0sl; +34 more |
| CVE-2008-3808 | – | Sep 26 | Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted Protocol Independent Multicast (PIM)… Affected: 12.0; 12.0da; 12.0db; 12.0s; 12.0sl; 12.0sp; +34 more |
| CVE-2008-3807 | – | Sep 26 | Cisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured, enables a read/write SNMP service with "private" as the community, which allows… Affected: 12.2bc; 12.2cx; 12.2cy; 12.2xf; 12.3bc |
| CVE-2008-3806 | – | Sep 26 | Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication… Affected: 12.0s; 12.0sl; 12.0st; 12.2sb; 12.2sca; 12.2src; +5 more |
| CVE-2008-3805 | – | Sep 26 | Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication… Affected: 12.2b; 12.2ca; 12.2l; 12.2rc; 12.2s; 12.2t; +5 more |
| CVE-2008-3804 | – | Sep 26 | Unspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of… Affected: 12.2; 12.4 |
| CVE-2008-3803 | – | Sep 26 | A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN with extended communities is configured, sometimes causes a corrupted route target… Affected: 12.0s; 12.0sx; 12.0sz |
| CVE-2008-3802 | – | Sep 26 | Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a… Affected: 12.2b; 12.2bx; 12.2by; 12.2cz; 12.2mc; 12.2t; +34 more |
| CVE-2008-3801 | – | Sep 26 | Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is… Affected: 12.2; 12.3; 12.4 |
| CVE-2008-3800 | – | Sep 26 | Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is… Affected: 12.2; 12.3; 12.4 |
| CVE-2008-3799 | – | Sep 26 | Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service… Affected: 12.2; 12.3; 12.4 |
| CVE-2008-3798 | – | Sep 26 | Cisco IOS 12.4 allows remote attackers to cause a denial of service (device crash) via a normal, properly formed SSL packet that occurs during termination of an SSL session Affected: 12.4; 12.4mr |
| CVE-2008-2739 | – | Sep 26 | The SERVICE.DNS signature engine in the Intrusion Prevention System (IPS) in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device crash or hang)… Affected: 12.3t; 12.3xl; 12.3xq; 12.3xr; 12.3xs; 12.3xx; +17 more |
| CVE-2008-1152 | – | Mar 27 | The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device restart or memory consumption) via crafted (1)… Affected: 12.0; 12.2yd; 12.2yf; 12.2yg; 12.2yh |
| CVE-2008-1151 | – | Mar 27 | Memory leak in the virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (memory consumption) via a series… Affected: through 12.2 |
| CVE-2008-1150 | – | Mar 27 | The virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (resource exhaustion) via a series of PPTP… Affected: through 12.2 |
The 500 most important CVEs for this product (exploited first, then by severity)