IO
Product
IOS
On CISA KEVExploited in the wild
618
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 134Medium 81Low 1
Watch
Add IOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-12650 | 8.8 | Sep 25 | Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated… Affected: 16.11.1 |
| CVE-2019-12648 | 8.8 | Sep 25 | A vulnerability in the IOx application environment for Cisco IOS Software could allow an authenticated, remote attacker to gain unauthorized access to the Guest Operating System… Affected: 15.7(3)m3 |
| CVE-2018-0255 | 8.8 | Apr 19 | A vulnerability in the device manager web interface of Cisco Industrial Ethernet Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… Affected: 15.2(5)e |
| CVE-2026-20301 | 8.6 | Aug 5 | Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability Affected: 15.2(7)E7; 15.2(8)E3; 15.7(3)M10; 15.8(3)M9; 15.9(3)M7; 15.2(7)E8; +34 more |
| CVE-2026-20012 | 8.6 | Mar 25 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA)… Affected: 15.2(1)S; 15.2(2)S; 15.2(1)S1; 15.2(4)S; 15.2(1)S2; 15.2(2)S1; +34 more |
| CVE-2025-20154 | 8.6 | May 7 | A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker… Affected: through 15.9\(3\)m11 |
| CVE-2022-20697 | 8.6 | Apr 15 | A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS)… Affected: 15.1(3)svr1; 15.1(3)svr2; 15.1(3)svr3; 15.1(3)svs; 15.1(3)svs1; 15.1(3)svt1; +20 more |
| CVE-2020-3408 | 8.6 | Sep 24 | A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload,… Affected: 15.8(3)m3 |
| CVE-2020-3228 | 8.6 | Jun 3 | A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote… Affected: 12.2(6)i1; 15.1(1)sy; 15.1(1)sy1; 15.1(1)sy2; 15.1(1)sy3; 15.1(1)sy4; +34 more |
| CVE-2020-3226 | 8.6 | Jun 3 | A vulnerability in the Session Initiation Protocol (SIP) library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a… Affected: 15.0(2)sg11a; 15.3(3)jaa1; 15.3(3)jpi; 15.3(3)jpj; 15.3(3)m; 15.3(3)m1; +34 more |
| CVE-2020-3225 | 8.6 | Jun 3 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,… Affected: 12.2(44)ex; 12.2(44)ex1; 12.2(46)se1; 12.2(46)se2; 12.2(50)se; 12.2(50)se1; +34 more |
| CVE-2019-1747 | 8.6 | Mar 28 | A vulnerability in the implementation of the Short Message Service (SMS) handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,… Affected: 15.8(3)m |
| CVE-2019-1740 | 8.6 | Mar 28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 15.3(3)jd; 15.3(3)jd2; 15.3(3)jd3; 15.3(3)jd4; 15.3(3)jd5; 15.3(3)jd6; +34 more |
| CVE-2019-1737 | 8.6 | Mar 27 | A vulnerability in the processing of IP Service Level Agreement (SLA) packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to… Affected: 12.2(58)ex; 12.2(58)ez; 12.2(60)ez; 12.2(60)ez1; 12.2(60)ez2; 12.2(60)ez3; +34 more |
| CVE-2018-15377 | 8.6 | Oct 5 | A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an… Affected: 15.7(3.1s)m; denali-16.3.6; everest-16.5.1 |
| CVE-2018-0485 | 8.6 | Oct 5 | A vulnerability in the SM-1T3/E3 firmware on Cisco Second Generation Integrated Services Routers (ISR G2) and the Cisco 4451-X Integrated Services Router (ISR4451-X) could allow… Affected: 15.6(3)m |
| CVE-2018-0473 | 8.6 | Oct 5 | A vulnerability in the Precision Time Protocol (PTP) subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… Affected: 15.2(4)e; 15.2(5) |
| CVE-2017-3863 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 12.2(33)sxi4; 12.2(33)sxi4a; 12.2(33)sxi5; 12.2(33)sxi6; 12.2(33)sxi7; 12.2(33)sxi8; +34 more |
| CVE-2017-3862 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 12.2(33)sxi4; 12.2(33)sxi4a; 12.2(33)sxi5; 12.2(33)sxi6; 12.2(33)sxi7; 12.2(33)sxi8; +34 more |
| CVE-2017-3861 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 12.2(33)sxi4; 12.2(33)sxi4a; 12.2(33)sxi5; 12.2(33)sxi6; 12.2(33)sxi7; 12.2(33)sxi8; +34 more |
| CVE-2017-3860 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 12.2(33)sxi4; 12.2(33)sxi4a; 12.2(33)sxi5; 12.2(33)sxi6; 12.2(33)sxi7; 12.2(33)sxi8; +34 more |
| CVE-2017-3864 | 8.6 | Mar 22 | A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenticated, remote… Affected: 15.0 through 15.6; 12.2; 12.4 |
| CVE-2025-20160 | 8.1 | Sep 24 | A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive… Affected: 15.2(4)e6; 15.2(4)e7; 15.2(4)e8; 15.2(4)e9; 15.2(4)e10; 15.2(4)e10a; +34 more |
| CVE-2020-3475 | 8.1 | Sep 24 | Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read… Affected: All versions, or not specified |
| CVE-2020-3257 | 8.1 | Jun 3 | Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected… Affected: 15.8(3.0z)m1; 15.9 |
| CVE-2016-6380 | 8.1 | Oct 5 | The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or… Affected: 12.0(3)t; 12.0(3)t1; 12.0(3)t2; 12.0(3)t3; 12.0(3)xe; 12.0(3)xe1; +34 more |
| CVE-2021-1392 | 7.8 | Mar 24 | A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial… Affected: 15.0(1)ey; 15.0(1)ey1; 15.0(1)ey2; 15.1(3)svs; 15.1(3)svt1; 15.2(1)ey; +34 more |
| CVE-2018-0169 | 7.8 | Mar 28 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device… Affected: 15.0(5.59)emd |
| CVE-2016-6414 | 7.8 | Sep 22 | iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox… Affected: 15.6(1)t1 |
| CVE-2026-20125 | 7.7 | Mar 25 | A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to… Affected: 12.2(33)CY; 12.2(33)CY1; 12.2(33)CY2; 12.2(55)SE; 12.2(55)SE3; 12.2(55)SE2; +34 more |
| CVE-2025-20327 | 7.7 | Sep 24 | A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected… Affected: 15.2(6)e2; 15.2(6)e2a; 15.2(6)e2b; 15.2(6)e3; 15.2(7)e; 15.2(7)e0a; +23 more |
| CVE-2025-20176 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 15.0(1)sy; 15.0(1)sy1; 15.0(1)sy2; 15.0(1)sy3; 15.0(1)sy4; 15.0(1)sy5; +34 more |
| CVE-2025-20175 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 12.2(33)sxi4; 12.2(33)sxi4a; 12.2(33)sxi5; 12.2(33)sxi6; 12.2(33)sxi7; 12.2(33)sxi8; +34 more |
| CVE-2025-20174 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 15.2(1)sy; 15.2(1)sy0a; 15.2(1)sy1; 15.2(1)sy1a; 15.2(1)sy2; 15.2(1)sy3; +34 more |
| CVE-2025-20173 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 12.2(33)sre; 12.2(33)sre0a; 12.2(33)sre1; 12.2(33)sre2; 12.2(33)sre3; 12.2(33)sre4; +34 more |
| CVE-2025-20172 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS… Affected: 12.2(33)sre; 12.2(33)sre0a; 12.2(33)sre1; 12.2(33)sre2; 12.2(33)sre3; 12.2(33)sre4; +34 more |
| CVE-2025-20171 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 12.2(33)cx; 12.2(33)cy; 12.2(33)cy1; 12.2(33)cy2; 12.2(33)ira; 12.2(33)irb; +34 more |
| CVE-2025-20170 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 12.2(1); 12.2(1)dx; 12.2(1)dx1; 12.2(1)m0; 12.2(1)mb1; 12.2(1)xd; +34 more |
| CVE-2025-20169 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 12.2(1); 12.2(1)dx; 12.2(1)dx1; 12.2(1)m0; 12.2(1)mb1; 12.2(1)xd; +34 more |
| CVE-2022-20920 | 7.7 | Oct 10 | Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability Affected: 12.2(6)i1; 12.2(58)ex; 12.2(58)ey; 12.2(58)ey1; 12.2(58)ey2; 12.2(58)ez; +34 more |
| CVE-2021-34699 | 7.7 | Sep 23 | A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload Affected: 12.2(6)i1; 15.0(1)sy; 15.0(1)sy1; 15.0(1)sy2; 15.0(1)sy3; 15.0(1)sy4; +34 more |
| CVE-2021-1620 | 7.7 | Sep 23 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated,… Affected: 12.2(6)i1; 15.1(3)svr1; 15.1(3)svr2; 15.1(3)svr3; 15.1(3)svs; 15.1(3)svs1; +34 more |
| CVE-2020-3235 | 7.7 | Jun 3 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an… Affected: 12.2(52)sg; 12.2(53)sg1; 12.2(53)sg2; 12.2(53)sg3; 12.2(53)sg4; 12.2(53)sg5; +34 more |
| CVE-2020-3200 | 7.7 | Jun 3 | A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to… Affected: 12.2(6)i1; 12.2(58)ex; 12.2(58)ey; 12.2(58)ey1; 12.2(58)ey2; 12.2(58)ez; +34 more |
| CVE-2024-20433 | 7.5 | Sep 25 | A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an… Affected: 12.0(24)s; 12.0(24)s1; 12.0(24)s2; 12.0(24)s2a; 12.0(24)s2b; 12.0(24)s3; +34 more |
| CVE-2024-20308 | 7.5 | Mar 27 | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow,… Affected: 12.4(22)md; 12.4(22)md1; 12.4(22)md2; 12.4(22)mda; 12.4(22)mda1; 12.4(22)mda2; +34 more |
| CVE-2024-20307 | 7.5 | Mar 27 | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting… Affected: 15.1(2)sg8; 15.1(2)sy8; 15.1(2)sy9; 15.1(2)sy10; 15.1(2)sy11; 15.1(2)sy12; +34 more |
| CVE-2024-20311 | 7.5 | Mar 27 | A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an… Affected: 15.1(1)sy; 15.1(1)sy1; 15.1(1)sy2; 15.1(1)sy3; 15.1(1)sy4; 15.1(1)sy5; +34 more |
| CVE-2023-20080 | 7.5 | Mar 23 | A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial… Affected: 12.2(6)i1; 15.1(2)sg; 15.1(2)sg1; 15.1(2)sg2; 15.1(2)sg3; 15.1(2)sg4; +34 more |
| CVE-2022-20726 | 7.5 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 15.2(5)e1; 15.2(5)e2c; 15.2(6)e0a; 15.2(6)e1; 15.2(6)e2a; 15.2(7)e; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)