IO
Product
IOS
On CISA KEVExploited in the wild
618
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 134Medium 81Low 1
Watch
Add IOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6385 | 7.5 | Oct 5 | Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service… Affected: 12.2(35)ex; 12.2(35)ex1; 12.2(35)ex2; 12.2(35)se; 12.2(35)se1; 12.2(35)se2; +34 more |
| CVE-2016-6379 | 7.5 | Oct 5 | Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record (IPDR) packets, aka Bug ID… Affected: 12.2(33)cx; 12.2(33)cy; 12.2(33)cy1; 12.2(33)sch; 12.2(33)sch0a; 12.2(33)sch1; +10 more |
| CVE-2016-6392 | 7.5 | Oct 5 | Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service (device restart) via a crafted IPv4 Multicast Source Discovery… Affected: 12.2(33)cx; 12.2(33)cy; 12.2(33)cy1; 12.2(33)ira; 12.2(33)irb; 12.2(33)irc; +34 more |
| CVE-2016-6384 | 7.5 | Oct 5 | Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service (device reload) via crafted fields in an… Affected: 12.2 through 12.4; 15.0 through 15.6 |
| CVE-2016-6382 | 7.5 | Oct 5 | Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Protocol Independent… Affected: 15.2(1)sy; 15.2(1)sy0a; 15.2(1)sy1; 15.2(1)sy1a; 15.2(2)e; 15.2(2)e1; +34 more |
| CVE-2016-6381 | 7.5 | Oct 5 | Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented… Affected: 12.4(15)t7; 12.4(15)t8; 12.4(15)t9; 12.4(15)t10; 12.4(15)t11; 12.4(15)t12; +34 more |
| CVE-2016-6409 | 7.5 | Sep 24 | The Data in Motion (DMo) component in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service (out-of-bounds… Affected: 15.6(1)t |
| CVE-2016-1478 | 7.5 | Aug 8 | Cisco IOS 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service (interface… Affected: 15.5(3)s3; 15.6(1)s2; 15.6(2)s1; 15.6(2)t1 |
| CVE-2015-6289 | 7.5 | Jun 23 | Cisco IOS 15.5(3)M on Integrated Services Router (ISR) 800, 819, and 829 devices allows remote attackers to cause a denial of service (memory consumption) via crafted TCP packets… Affected: 15.5(3)m |
| CVE-2016-1409 | 7.5 | May 29 | The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a… Affected: 12.0(1); 12.0(1)db; 12.0(1)s; 12.0(1)t; 12.0(1)t1; 12.0(1)xa; +34 more |
| CVE-2016-1399 | 7.5 | May 14 | The packet-processing microcode in Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2, and 15.2(4)EA on Industrial Ethernet 4000 devices and 15.2(2)EB and 15.2(2)EB1 on Industrial… Affected: 15.2(2)eb; 15.2(2)eb1; 15.2(2)ea; 15.2(2)ea1 |
| CVE-2016-1384 | 7.5 | Apr 20 | The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898 Affected: 15.1(1)s; 15.1(1)s1; 15.1(1)s2; 15.1(2)s; 15.1(2)s1; 15.1(2)s2; +27 more |
| CVE-2016-1351 | 7.5 | Mar 26 | The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload)… Affected: 15.1(1)sy1; 15.1(1)sy2; 15.1(1)sy3; 15.1(1)sy4; 15.1(1)sy5; 15.1(2)sy; +11 more |
| CVE-2016-1347 | 7.5 | Mar 24 | The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted… Affected: 15.1(4)gc2; 15.1(4)m6; 15.1(4)xb4; 15.1(4)xb5; 15.1(4)xb5a; 15.1(4)xb6; +27 more |
| CVE-2012-0382 | 7.5 | Mar 29 | The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS… Affected: 12.0; 12.2; 12.2(1); 12.2(1)dx; 12.2(1)s; 12.2(1)t; +34 more |
| CVE-2012-0381 | 7.5 | Mar 29 | The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and… Affected: 12.0; 12.2; 12.2(1); 12.2(1)dx; 12.2(1)s; 12.2(1)t; +34 more |
| CVE-2011-2058 | 7.5 | Oct 22 | The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle an external loop between a pair of dot1x enabled ports, which allows remote attackers to… Affected: 12.2 before 12.2\(33\)sxi7 |
| CVE-2011-2057 | 7.5 | Oct 22 | The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle (1) a loop between a dot1x enabled port and an open-authentication dot1x enabled port… Affected: 12.2 before 12.2\(33\)sxi7 |
| CVE-2011-1640 | 7.5 | Oct 22 | The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Management Address (MA) TLVs, which allows remote attackers to… Affected: 12.2 before 12.2\(33\)sxj1 |
| CVE-2011-3280 | 7.5 | Oct 3 | Memory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (memory… Affected: 12.1; 12.1e; 12.2; 12.2b; 12.2bc; 12.2bx; +34 more |
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 12.1(11)e; 12.1(11b)e; 12.1(11b)e12; 12.1(11b)e14; 12.1(13)e9; 12.1(19)e1; +4 more |
| CVE-2002-1706 | 7.5 | Dec 31 | Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface… Affected: 11.3 through 12.2 |
| CVE-2024-20312 | 7.4 | Mar 27 | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent… Affected: 15.0(1)ex; 15.1(1)sy; 15.1(1)sy1; 15.1(1)sy2; 15.1(1)sy3; 15.1(1)sy4; +34 more |
| CVE-2024-20276 | 7.4 | Mar 27 | A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly Affected: 15.5(1)sy5; 15.5(1)sy6; 15.5(1)sy7; 15.5(1)sy8; 15.5(1)sy9; 15.5(1)sy10; +1 more |
| CVE-2021-34714 | 7.4 | Sep 23 | A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS… Affected: through 8.4\(3.115\); through 7.0\(3\)i7\(9\); through 7.3\(8\)n1\(1\); through 3.2\(3o\)a; through 4.1\(1a\)a |
| CVE-2020-3409 | 7.4 | Sep 24 | A vulnerability in the PROFINET feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to crash and… Affected: 15.2(7)e; 16.11.1a |
| CVE-2019-12665 | 7.4 | Sep 25 | A vulnerability in the HTTP client feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to read and modify data that should normally have been… Affected: 15.6(2)t; fd-1.5.0 |
| CVE-2019-1748 | 7.4 | Mar 28 | A vulnerability in the Cisco Network Plug-and-Play (PnP) agent of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized… Affected: 12.0(1); 12.0(1)t; 12.0(1)t1; 12.0(1)xe; 12.0(1a); 12.0(2); +34 more |
| CVE-2018-15373 | 7.4 | Oct 5 | A vulnerability in the implementation of Cisco Discovery Protocol functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker… Affected: 15.5(3)s3.16 |
| CVE-2018-0475 | 7.4 | Oct 5 | A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial… Affected: 15.0(2.0.0) |
| CVE-2017-3849 | 7.4 | Mar 21 | A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and Cisco IOS XE Software (possibly 3.7… Affected: 15.2(3)e; 15.2(3)e1; 15.2(3)e2; 15.2(3)e3; 15.2(4)e; 15.2(4)e1; +34 more |
| CVE-2016-6474 | 7.3 | Dec 14 | A vulnerability in the implementation of X.509 Version 3 for SSH authentication functionality in Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 15.5(2.25)t |
| CVE-2019-1756 | 7.2 | Mar 28 | A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges Affected: 11.0(20.3); 16.9(1) |
| CVE-2012-0384 | 7.2 | Mar 29 | Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG… Affected: 12.2; 12.2(1); 12.2(1)dx; 12.2(1)s; 12.2(1)t; 12.2(1)xa; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)