IO
Product
IOS
On CISA KEVExploited in the wild
620
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 135Medium 82Low 1
Watch
Add IOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0473 | 8.6 | Oct 5 | A vulnerability in the Precision Time Protocol (PTP) subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… Affected: 15.2(4)e; 15.2(5) |
| CVE-2017-3863 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 12.2(33)sxi4; 12.2(33)sxi4a; 12.2(33)sxi5; 12.2(33)sxi6; 12.2(33)sxi7; 12.2(33)sxi8; +34 more |
| CVE-2017-3862 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 12.2(33)sxi4; 12.2(33)sxi4a; 12.2(33)sxi5; 12.2(33)sxi6; 12.2(33)sxi7; 12.2(33)sxi8; +34 more |
| CVE-2017-3861 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 12.2(33)sxi4; 12.2(33)sxi4a; 12.2(33)sxi5; 12.2(33)sxi6; 12.2(33)sxi7; 12.2(33)sxi8; +34 more |
| CVE-2017-3860 | 8.6 | Apr 20 | Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to… Affected: 12.2(33)sxi4; 12.2(33)sxi4a; 12.2(33)sxi5; 12.2(33)sxi6; 12.2(33)sxi7; 12.2(33)sxi8; +34 more |
| CVE-2017-3864 | 8.6 | Mar 22 | A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenticated, remote… Affected: 15.0 through 15.6; 12.2; 12.4 |
| CVE-2025-20160 | 8.1 | Sep 24 | A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive… Affected: 15.2(6)E1; 15.2(4)E6; 15.2(6)E2; 15.2(4)E7; 15.2(7)E; 15.2(4)E8; +34 more |
| CVE-2020-3475 | 8.1 | Sep 24 | Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read… Affected: All versions, or not specified |
| CVE-2020-3257 | 8.1 | Jun 3 | Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected… Affected: 15.8(3.0z)m1; 15.9 |
| CVE-2016-6380 | 8.1 | Oct 5 | The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or… Affected: 12.0(3)t; 12.0(3)t1; 12.0(3)t2; 12.0(3)t3; 12.0(3)xe; 12.0(3)xe1; +34 more |
| CVE-2021-1392 | 7.8 | Mar 24 | A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial… Affected: 15.0(1)ey; 15.0(1)ey1; 15.0(1)ey2; 15.1(3)svs; 15.1(3)svt1; 15.2(1)ey; +34 more |
| CVE-2018-0169 | 7.8 | Mar 28 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device… Affected: 15.0(5.59)emd |
| CVE-2016-6414 | 7.8 | Sep 22 | iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox… Affected: 15.6(1)t1 |
| CVE-2026-20125 | 7.7 | Mar 25 | A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to… Affected: 12.2(33)CY; 12.2(33)CY1; 12.2(33)CY2; 12.2(55)SE; 12.2(55)SE3; 12.2(55)SE2; +34 more |
| CVE-2025-20327 | 7.7 | Sep 24 | A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected… Affected: 15.2(6)E2; 15.2(7)E; 15.2(6)E2a; 15.2(6)E2b; 15.2(7)E1; 15.2(7)E0a; +23 more |
| CVE-2025-20176 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 15.0(1)sy; 15.0(1)sy1; 15.0(1)sy2; 15.0(1)sy3; 15.0(1)sy4; 15.0(1)sy5; +34 more |
| CVE-2025-20175 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 12.2(33)sxi4; 12.2(33)sxi4a; 12.2(33)sxi5; 12.2(33)sxi6; 12.2(33)sxi7; 12.2(33)sxi8; +34 more |
| CVE-2025-20174 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 15.2(1)sy; 15.2(1)sy0a; 15.2(1)sy1; 15.2(1)sy1a; 15.2(1)sy2; 15.2(1)sy3; +34 more |
| CVE-2025-20173 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 12.2(33)sre; 12.2(33)sre0a; 12.2(33)sre1; 12.2(33)sre2; 12.2(33)sre3; 12.2(33)sre4; +34 more |
| CVE-2025-20172 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS… Affected: 12.2(33)sre; 12.2(33)sre0a; 12.2(33)sre1; 12.2(33)sre2; 12.2(33)sre3; 12.2(33)sre4; +34 more |
| CVE-2025-20171 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 12.2(33)cx; 12.2(33)cy; 12.2(33)cy1; 12.2(33)cy2; 12.2(33)ira; 12.2(33)irb; +34 more |
| CVE-2025-20170 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 12.2(1); 12.2(1)dx; 12.2(1)dx1; 12.2(1)m0; 12.2(1)mb1; 12.2(1)xd; +34 more |
| CVE-2025-20169 | 7.7 | Feb 5 | A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device Affected: 12.2(1); 12.2(1)dx; 12.2(1)dx1; 12.2(1)m0; 12.2(1)mb1; 12.2(1)xd; +34 more |
| CVE-2022-20920 | 7.7 | Oct 10 | Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability Affected: 12.2(6)i1; 12.2(58)ex; 12.2(58)ey; 12.2(58)ey1; 12.2(58)ey2; 12.2(58)ez; +34 more |
| CVE-2021-34699 | 7.7 | Sep 23 | A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload Affected: 12.2(6)i1; 15.0(1)sy; 15.0(1)sy1; 15.0(1)sy2; 15.0(1)sy3; 15.0(1)sy4; +34 more |
| CVE-2021-1620 | 7.7 | Sep 23 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated,… Affected: 12.2(6)i1; 15.1(3)svr1; 15.1(3)svr2; 15.1(3)svr3; 15.1(3)svs; 15.1(3)svs1; +34 more |
| CVE-2020-3235 | 7.7 | Jun 3 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an… Affected: 12.2(52)sg; 12.2(53)sg1; 12.2(53)sg2; 12.2(53)sg3; 12.2(53)sg4; 12.2(53)sg5; +34 more |
| CVE-2020-3200 | 7.7 | Jun 3 | A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to… Affected: 12.2(6)i1; 12.2(58)ex; 12.2(58)ey; 12.2(58)ey1; 12.2(58)ey2; 12.2(58)ez; +34 more |
| CVE-2024-20433 | 7.5 | Sep 25 | A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an… Affected: 12.0(24)s; 12.0(24)s1; 12.0(24)s2; 12.0(24)s2a; 12.0(24)s2b; 12.0(24)s3; +34 more |
| CVE-2024-20308 | 7.5 | Mar 27 | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow,… Affected: 12.4(22)md; 12.4(22)md1; 12.4(22)md2; 12.4(22)mda; 12.4(22)mda1; 12.4(22)mda2; +34 more |
| CVE-2024-20307 | 7.5 | Mar 27 | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting… Affected: 15.1(2)sg8; 15.1(2)sy8; 15.1(2)sy9; 15.1(2)sy10; 15.1(2)sy11; 15.1(2)sy12; +34 more |
| CVE-2024-20311 | 7.5 | Mar 27 | A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an… Affected: 15.1(1)sy; 15.1(1)sy1; 15.1(1)sy2; 15.1(1)sy3; 15.1(1)sy4; 15.1(1)sy5; +34 more |
| CVE-2023-20080 | 7.5 | Mar 23 | A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial… Affected: 12.2(6)i1; 15.1(2)sg; 15.1(2)sg1; 15.1(2)sg2; 15.1(2)sg3; 15.1(2)sg4; +34 more |
| CVE-2022-20726 | 7.5 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 15.2(5)e1; 15.2(5)e2c; 15.2(6)e0a; 15.2(6)e1; 15.2(6)e2a; 15.2(7)e; +34 more |
| CVE-2021-1460 | 7.5 | Mar 24 | A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers (Industrial ISRs), Cisco 829 Industrial ISRs, Cisco CGR 1000 Compute… Affected: before 15.9\(3\)m3 |
| CVE-2020-3479 | 7.5 | Sep 24 | A vulnerability in the implementation of Multiprotocol Border Gateway Protocol (MP-BGP) for the Layer 2 VPN (L2VPN) Ethernet VPN (EVPN) address family in Cisco IOS Software and… Affected: All versions, or not specified |
| CVE-2020-3230 | 7.5 | Jun 3 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 12.2(6)i1; 15.0(2)ej; 15.0(2)ej1; 15.0(2)ek; 15.0(2)ek1; 15.0(2)ex; +34 more |
| CVE-2011-4661 | 7.5 | Feb 12 | A memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP PROXY Server process (aka CSCtu52820), when configured with Cisco ISR Web Security… Affected: before 15.2\(1\)t |
| CVE-2019-12669 | 7.5 | Sep 25 | A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Software, could allow an unauthenticated, remote attacker to… Affected: 15.2(3)e; 15.2(3)e5; 16.11.1 |
| CVE-2019-12656 | 7.5 | Sep 25 | A vulnerability in the IOx application environment of multiple Cisco platforms could allow an unauthenticated, remote attacker to cause the IOx web server to stop processing HTTPS… Affected: 1.6.0.0; 1.8.0 |
| CVE-2019-12655 | 7.5 | Sep 25 | A vulnerability in the FTP application layer gateway (ALG) functionality used by Network Address Translation (NAT), NAT IPv6 to IPv4 (NAT64), and the Zone-Based Policy Firewall… Affected: 3.16.8s before 16.3.8; 16.10.1 before 16.11.1; 16.6.4; 16.6.5; 16.9.1; 16.9.2 |
| CVE-2019-12652 | 7.5 | Sep 25 | A vulnerability in the ingress packet processing function of Cisco IOS Software for Cisco Catalyst 4000 Series Switches could allow an unauthenticated, remote attacker to cause a… Affected: 15.2(3)e1; 15.2(4)e3 |
| CVE-2019-1752 | 7.5 | Mar 28 | A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload Affected: 15.0(1)m; 15.0(1)m1; 15.0(1)m2; 15.0(1)m3; 15.0(1)m4; 15.0(1)m5; +34 more |
| CVE-2019-1751 | 7.5 | Mar 28 | A vulnerability in the Network Address Translation 64 (NAT64) functions of Cisco IOS Software could allow an unauthenticated, remote attacker to cause either an interface queue… Affected: 15.4(1)cg1; 15.4(1)t; 15.4(1)t1; 15.4(1)t2; 15.4(1)t3; 15.4(1)t4; +34 more |
| CVE-2019-1739 | 7.5 | Mar 28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 15.1(2)sg8a; 15.1(3)svg3d; 15.1(3)svi1b; 15.1(3)svk4b; 15.1(3)svk4c; 15.1(3)svm3; +34 more |
| CVE-2019-1738 | 7.5 | Mar 28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 15.1(2)sg8a; 15.1(3)svg3d; 15.1(3)svi1b; 15.1(3)svk4b; 15.1(3)svk4c; 15.1(3)svm3; +34 more |
| CVE-2017-3857 | 7.5 | Mar 22 | A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an… Affected: 12.0 through 12.4; 15.0 through 15.6 |
| CVE-2016-9201 | 7.5 | Dec 14 | A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise… Affected: 15.3(3)m3 |
| CVE-2016-6422 | 7.5 | Oct 6 | Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords in TCAM share ACLs, which allows remote… Affected: 12.2(33)sxj9 |
| CVE-2016-6393 | 7.5 | Oct 5 | The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via… Affected: 12.0 through 12.4; 15.0 through 15.6 |
The 500 most important CVEs for this product (exploited first, then by severity)