IOS vulnerabilities | LiveThreat CVE Feed

Product

IOS

by Cisco · last CVE Aug 5, 2026

On CISA KEVExploited in the wild

618

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities618 In the news2 Timeline

Severity mix

Critical 8High 134Medium 81Low 1

Severity

All severities500 Critical8 High134 Medium81 Low1

Exploitation

On CISA KEV39 Exploited in the wild39

Watch

Add IOS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-1460	7.5	1%	Mar 24	A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers (Industrial ISRs), Cisco 829 Industrial ISRs, Cisco CGR 1000 Compute… Affected: before 15.9\(3\)m3
CVE-2020-3479	7.5	1%	Sep 24	A vulnerability in the implementation of Multiprotocol Border Gateway Protocol (MP-BGP) for the Layer 2 VPN (L2VPN) Ethernet VPN (EVPN) address family in Cisco IOS Software and… Affected: All versions, or not specified
CVE-2020-3230	7.5	2%	Jun 3	A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 12.2(6)i1; 15.0(2)ej; 15.0(2)ej1; 15.0(2)ek; 15.0(2)ek1; 15.0(2)ex; +34 more
CVE-2011-4661	7.5	1%	Feb 12	A memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP PROXY Server process (aka CSCtu52820), when configured with Cisco ISR Web Security… Affected: before 15.2\(1\)t
CVE-2019-12669	7.5	2%	Sep 25	A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Software, could allow an unauthenticated, remote attacker to… Affected: 15.2(3)e; 15.2(3)e5; 16.11.1
CVE-2019-12656	7.5	2%	Sep 25	A vulnerability in the IOx application environment of multiple Cisco platforms could allow an unauthenticated, remote attacker to cause the IOx web server to stop processing HTTPS… Affected: 1.6.0.0; 1.8.0
CVE-2019-12655	7.5	2%	Sep 25	A vulnerability in the FTP application layer gateway (ALG) functionality used by Network Address Translation (NAT), NAT IPv6 to IPv4 (NAT64), and the Zone-Based Policy Firewall… Affected: 3.16.8s before 16.3.8; 16.10.1 before 16.11.1; 16.6.4; 16.6.5; 16.9.1; 16.9.2
CVE-2019-12652	7.5	3%	Sep 25	A vulnerability in the ingress packet processing function of Cisco IOS Software for Cisco Catalyst 4000 Series Switches could allow an unauthenticated, remote attacker to cause a… Affected: 15.2(3)e1; 15.2(4)e3
CVE-2019-1752	7.5	3%	Mar 28	A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload Affected: 15.0(1)m; 15.0(1)m1; 15.0(1)m2; 15.0(1)m3; 15.0(1)m4; 15.0(1)m5; +34 more
CVE-2019-1751	7.5	3%	Mar 28	A vulnerability in the Network Address Translation 64 (NAT64) functions of Cisco IOS Software could allow an unauthenticated, remote attacker to cause either an interface queue… Affected: 15.4(1)cg1; 15.4(1)t; 15.4(1)t1; 15.4(1)t2; 15.4(1)t3; 15.4(1)t4; +34 more
CVE-2019-1739	7.5	3%	Mar 28	A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 15.1(2)sg8a; 15.1(3)svg3d; 15.1(3)svi1b; 15.1(3)svk4b; 15.1(3)svk4c; 15.1(3)svm3; +34 more
CVE-2019-1738	7.5	3%	Mar 28	A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 15.1(2)sg8a; 15.1(3)svg3d; 15.1(3)svi1b; 15.1(3)svk4b; 15.1(3)svk4c; 15.1(3)svm3; +34 more
CVE-2017-3857	7.5	3%	Mar 22	A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an… Affected: 12.0 through 12.4; 15.0 through 15.6
CVE-2016-9201	7.5	3%	Dec 14	A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise… Affected: 15.3(3)m3
CVE-2016-6422	7.5	2%	Oct 6	Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords in TCAM share ACLs, which allows remote… Affected: 12.2(33)sxj9
CVE-2016-6393	7.5	5%	Oct 5	The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via… Affected: 12.0 through 12.4; 15.0 through 15.6
CVE-2016-6391	7.5	2%	Oct 5	Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service (traffic-processing outage) via a crafted series of Common Industrial Protocol (CIP)… Affected: 12.2(44)ex; 12.2(44)ex1; 12.2(46)se; 12.2(46)se1; 12.2(46)se2; 12.2(50)se; +34 more
CVE-2016-6385	7.5	3%	Oct 5	Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service… Affected: 12.2(35)ex; 12.2(35)ex1; 12.2(35)ex2; 12.2(35)se; 12.2(35)se1; 12.2(35)se2; +34 more
CVE-2016-6379	7.5	3%	Oct 5	Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record (IPDR) packets, aka Bug ID… Affected: 12.2(33)cx; 12.2(33)cy; 12.2(33)cy1; 12.2(33)sch; 12.2(33)sch0a; 12.2(33)sch1; +10 more
CVE-2016-6392	7.5	3%	Oct 5	Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service (device restart) via a crafted IPv4 Multicast Source Discovery… Affected: 12.2(33)cx; 12.2(33)cy; 12.2(33)cy1; 12.2(33)ira; 12.2(33)irb; 12.2(33)irc; +34 more
CVE-2016-6384	7.5	4%	Oct 5	Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service (device reload) via crafted fields in an… Affected: 12.2 through 12.4; 15.0 through 15.6
CVE-2016-6382	7.5	5%	Oct 5	Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Protocol Independent… Affected: 15.2(1)sy; 15.2(1)sy0a; 15.2(1)sy1; 15.2(1)sy1a; 15.2(2)e; 15.2(2)e1; +34 more
CVE-2016-6381	7.5	3%	Oct 5	Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented… Affected: 12.4(15)t7; 12.4(15)t8; 12.4(15)t9; 12.4(15)t10; 12.4(15)t11; 12.4(15)t12; +34 more
CVE-2016-6409	7.5	2%	Sep 24	The Data in Motion (DMo) component in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service (out-of-bounds… Affected: 15.6(1)t
CVE-2016-1478	7.5	2%	Aug 8	Cisco IOS 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service (interface… Affected: 15.5(3)s3; 15.6(1)s2; 15.6(2)s1; 15.6(2)t1
CVE-2015-6289	7.5	4%	Jun 23	Cisco IOS 15.5(3)M on Integrated Services Router (ISR) 800, 819, and 829 devices allows remote attackers to cause a denial of service (memory consumption) via crafted TCP packets… Affected: 15.5(3)m
CVE-2016-1409	7.5	4%	May 29	The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a… Affected: 12.0(1); 12.0(1)db; 12.0(1)s; 12.0(1)t; 12.0(1)t1; 12.0(1)xa; +34 more
CVE-2016-1399	7.5	2%	May 14	The packet-processing microcode in Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2, and 15.2(4)EA on Industrial Ethernet 4000 devices and 15.2(2)EB and 15.2(2)EB1 on Industrial… Affected: 15.2(2)eb; 15.2(2)eb1; 15.2(2)ea; 15.2(2)ea1
CVE-2016-1384	7.5	2%	Apr 20	The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898 Affected: 15.1(1)s; 15.1(1)s1; 15.1(1)s2; 15.1(2)s; 15.1(2)s1; 15.1(2)s2; +27 more
CVE-2016-1351	7.5	4%	Mar 26	The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload)… Affected: 15.1(1)sy1; 15.1(1)sy2; 15.1(1)sy3; 15.1(1)sy4; 15.1(1)sy5; 15.1(2)sy; +11 more
CVE-2016-1347	7.5	1%	Mar 24	The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted… Affected: 15.1(4)gc2; 15.1(4)m6; 15.1(4)xb4; 15.1(4)xb5; 15.1(4)xb5a; 15.1(4)xb6; +27 more
CVE-2012-0382	7.5	4%	Mar 29	The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS… Affected: 12.0; 12.2; 12.2(1); 12.2(1)dx; 12.2(1)s; 12.2(1)t; +34 more
CVE-2012-0381	7.5	4%	Mar 29	The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and… Affected: 12.0; 12.2; 12.2(1); 12.2(1)dx; 12.2(1)s; 12.2(1)t; +34 more
CVE-2011-2058	7.5	2%	Oct 22	The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle an external loop between a pair of dot1x enabled ports, which allows remote attackers to… Affected: 12.2 before 12.2\(33\)sxi7
CVE-2011-2057	7.5	2%	Oct 22	The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle (1) a loop between a dot1x enabled port and an open-authentication dot1x enabled port… Affected: 12.2 before 12.2\(33\)sxi7
CVE-2011-1640	7.5	2%	Oct 22	The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Management Address (MA) TLVs, which allows remote attackers to… Affected: 12.2 before 12.2\(33\)sxj1
CVE-2011-3280	7.5	2%	Oct 3	Memory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (memory… Affected: 12.1; 12.1e; 12.2; 12.2b; 12.2bc; 12.2bx; +34 more
CVE-2004-0079	7.5	10%	Nov 23	The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 12.1(11)e; 12.1(11b)e; 12.1(11b)e12; 12.1(11b)e14; 12.1(13)e9; 12.1(19)e1; +4 more
CVE-2002-1706	7.5	1%	Dec 31	Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface… Affected: 11.3 through 12.2
CVE-2024-20312	7.4	0%	Mar 27	A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent… Affected: 15.0(1)ex; 15.1(1)sy; 15.1(1)sy1; 15.1(1)sy2; 15.1(1)sy3; 15.1(1)sy4; +34 more
CVE-2024-20276	7.4	0%	Mar 27	A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly Affected: 15.5(1)sy5; 15.5(1)sy6; 15.5(1)sy7; 15.5(1)sy8; 15.5(1)sy9; 15.5(1)sy10; +1 more
CVE-2021-34714	7.4	0%	Sep 23	A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS… Affected: through 8.4\(3.115\); through 7.0\(3\)i7\(9\); through 7.3\(8\)n1\(1\); through 3.2\(3o\)a; through 4.1\(1a\)a
CVE-2020-3409	7.4	1%	Sep 24	A vulnerability in the PROFINET feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to crash and… Affected: 15.2(7)e; 16.11.1a
CVE-2019-12665	7.4	1%	Sep 25	A vulnerability in the HTTP client feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to read and modify data that should normally have been… Affected: 15.6(2)t; fd-1.5.0
CVE-2019-1748	7.4	1%	Mar 28	A vulnerability in the Cisco Network Plug-and-Play (PnP) agent of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized… Affected: 12.0(1); 12.0(1)t; 12.0(1)t1; 12.0(1)xe; 12.0(1a); 12.0(2); +34 more
CVE-2018-15373	7.4	1%	Oct 5	A vulnerability in the implementation of Cisco Discovery Protocol functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker… Affected: 15.5(3)s3.16
CVE-2018-0475	7.4	1%	Oct 5	A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial… Affected: 15.0(2.0.0)
CVE-2017-3849	7.4	1%	Mar 21	A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and Cisco IOS XE Software (possibly 3.7… Affected: 15.2(3)e; 15.2(3)e1; 15.2(3)e2; 15.2(3)e3; 15.2(4)e; 15.2(4)e1; +34 more
CVE-2016-6474	7.3	1%	Dec 14	A vulnerability in the implementation of X.509 Version 3 for SSH authentication functionality in Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 15.5(2.25)t
CVE-2019-1756	7.2	4%	Mar 28	A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges Affected: 11.0(20.3); 16.9(1)