IO
Product
IOS
On CISA KEVExploited in the wild
618
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 134Medium 81Low 1
Watch
Add IOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-0384 | 7.2 | Mar 29 | Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG… Affected: 12.2; 12.2(1); 12.2(1)dx; 12.2(1)s; 12.2(1)t; 12.2(1)xa; +34 more |
| CVE-2025-20181 | 6.8 | May 7 | A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or… Affected: 15.0(1)ex; 15.0(1)ey; 15.0(1)ey1; 15.0(1)ey2; 15.0(1)xo; 15.0(1)xo1; +34 more |
| CVE-2019-12672 | 6.8 | Sep 25 | A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker with physical access to an affected device to execute arbitrary code on the… Affected: 16.9.1 |
| CVE-2018-0282 | 6.8 | Jan 10 | A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload Affected: 15.2(2)e4 |
| CVE-2018-15369 | 6.8 | Oct 5 | A vulnerability in the TACACS+ client subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to… Affected: 15.6(1.9)t |
| CVE-2022-20727 | 6.7 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 15.2(5)e1; 15.2(6)e0a; 15.2(6)e1; 15.2(6)e2a; 15.2(7)e; 15.2(7)e0b; +34 more |
| CVE-2022-20677 | 6.7 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 17.6.1 |
| CVE-2021-1391 | 6.7 | Mar 24 | A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege Affected: 12.2(6)i1; 15.0(2)se13a; 15.1(3)svr1; 15.1(3)svr2; 15.1(3)svr3; 15.1(3)svs; +34 more |
| CVE-2020-3210 | 6.7 | Jun 3 | A vulnerability in the CLI parsers of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid… Affected: 12.2(60)ez16; 15.0(2)sg11a; 15.3(3)jaa1; 15.3(3)jpj; 15.9(3)m; 15.9(3)m0a |
| CVE-2020-3208 | 6.7 | Jun 3 | A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) could allow an… Affected: 12.2(60)ez16; 15.0(2)sg11a; 15.3(3)jaa1; 15.3(3)jpj; 15.5(3)m0a; 15.5(3)m1; +34 more |
| CVE-2020-3204 | 6.7 | Jun 3 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC… Affected: 12.2(6)i1; 12.2(33)sre; 12.2(33)sre0a; 12.2(33)sre1; 12.2(33)sre2; 12.2(33)sre3; +34 more |
| CVE-2019-12670 | 6.7 | Sep 25 | A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker within the IOx Guest Shell to modify the namespace container protections on… Affected: 16.10.1 |
| CVE-2019-12649 | 6.7 | Sep 25 | A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install and boot a malicious software image or execute… Affected: 16.9.1 |
| CVE-2019-1649 | 6.7 | May 13 | A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local… Affected: before 15.6\(3\)m7; 15.7 through 15.7\(3\)m5; 15.8 before 15.8\(3\)m3; 15.9 before 15.9\(3\)m; before 15.6\(3\)m6b; 15.7 through 15.7\(3\)m4b; +1 more |
| CVE-2018-15376 | 6.7 | Oct 5 | A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to… Affected: 15.5(2.21)t; 15.6(3)m |
| CVE-2018-15375 | 6.7 | Oct 5 | A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to… Affected: 15.5(2.21)t; 15.6(3)m |
| CVE-2025-20149 | 6.5 | Sep 24 | A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly,… Affected: 15.2(1)S; 15.2(2)S; 15.2(1)S1; 15.2(4)S; 15.2(1)S2; 15.2(2)S1; +34 more |
| CVE-2024-20414 | 6.5 | Sep 25 | A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… Affected: 15.2(6)e2; 15.2(6)e2a; 15.2(6)e2b; 15.2(6)e3; 15.2(6)eb; 15.2(7)e; +24 more |
| CVE-2022-20761 | 6.5 | Apr 15 | A vulnerability in the integrated wireless access point (AP) packet processing of the Cisco 1000 Series Connected Grid Router (CGR1K) could allow an unauthenticated, adjacent… Affected: 15.4(1)cg; 15.4(2)cg; 15.4(3)m; 15.4(3)m1; 15.4(3)m2; 15.4(3)m3; +34 more |
| CVE-2021-34703 | 6.5 | Sep 23 | A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an… Affected: through 16.12.3 |
| CVE-2021-1385 | 6.5 | Mar 24 | A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks… Affected: 15.8(3)m2a; 15.8(3)m3; 15.8(3)m4; 15.8(3)m5; 15.8(3)m6; 15.9(3)m; +4 more |
| CVE-2019-1746 | 6.5 | Mar 28 | A vulnerability in the Cluster Management Protocol (CMP) processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to… Affected: 12.1(6)ea1; 12.1(6)ea1a; 12.1(6)ea2; 12.1(6)ea2a; 12.1(6)ea2b; 12.1(6)ea2c; +34 more |
| CVE-2018-0484 | 6.5 | Jan 10 | A vulnerability in the access control logic of the Secure Shell (SSH) server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding… Affected: 16.6.2; 16.6.4 |
| CVE-2018-0466 | 6.5 | Oct 5 | A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an… Affected: 16.2.1 |
| CVE-2018-0197 | 6.5 | Oct 5 | A vulnerability in the VLAN Trunking Protocol (VTP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to corrupt the… Affected: 12.1(5c)ex; 12.1(5c)ex1; 12.1(5c)ex3; 12.1(6)ea1; 12.1(6)ea1a; 12.1(6)ea2; +34 more |
| CVE-2018-0163 | 6.5 | Mar 28 | A vulnerability in the 802.1x multiple-authentication (multi-auth) feature of Cisco IOS Software could allow an unauthenticated, adjacent attacker to bypass the authentication… Affected: 15.4(3)m6; 15.4(3)m6a; 15.4(3)m7; 15.4(3)m7a; 15.4(3)m8; 15.4(3.0i)m6; +27 more |
| CVE-2010-3050 | 6.5 | Sep 25 | Cisco IOS before 12.2(33)SXI allows remote authenticated users to cause a denial of service (device reboot) Affected: through 12.2\(33\)sxh2 |
| CVE-2017-6665 | 6.5 | Aug 7 | A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic… Affected: 15.2(3)e; 15.2(3)e1; 15.2(3)e2; 15.2(3)e3; 15.2(3)e4; 15.2(3)e5; +34 more |
| CVE-2012-5030 | 6.5 | Aug 2 | Cisco IOS before 15.2(4)S6 does not initialize an unspecified variable, which might allow remote authenticated users to cause a denial of service (CPU consumption, watchdog… Affected: through 15.2\(4\)s5 |
| CVE-2016-6473 | 6.5 | Dec 14 | A vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network storm Affected: 15.0(2)se8; 15.2(2)e1; 15.2(2)e2; 15.2(2a)e1; 15.2(3)e; 15.2(3)e1; +1 more |
| CVE-2016-6423 | 6.5 | Oct 5 | The IKEv2 client and initiator implementations in Cisco IOS 15.5(3)M and IOS XE allow remote IKEv2 servers to cause a denial of service (device reload) via crafted IKEv2 packets,… Affected: 15.5(3)m |
| CVE-2016-6412 | 6.5 | Sep 24 | The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger… Affected: 15.6(1)t1 |
| CVE-2016-6410 | 6.5 | Sep 24 | The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows remote authenticated users to read arbitrary… Affected: 15.5(2)t |
| CVE-2014-2146 | 6.5 | Sep 22 | The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which… Affected: through 15.4\(1\)t1 |
| CVE-2016-1425 | 6.5 | Jul 3 | Cisco IOS 15.0(2)SG5, 15.1(2)SG3, 15.2(1)E, 15.3(3)S, and 15.4(1.13)S allows remote attackers to cause a denial of service (device crash) via a crafted LLDP packet, aka Bug ID… Affected: 15.0(2)sg5; 15.1(2)sg3; 15.2(1)e; 15.3(3)s; 15.4(1.13)s |
| CVE-2016-1424 | 6.5 | Jun 19 | Cisco IOS 15.2(1)T1.11 and 15.2(2)TST allows remote attackers to cause a denial of service (device crash) via a crafted LLDP packet, aka Bug ID CSCun63132 Affected: 15.2(1)t1.11; 15.2(2)tst |
| CVE-2016-1333 | 6.5 | Feb 17 | Cisco IOS 15.5(3)M and 15.6(1)T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service (device reload) via an SNMP request for… Affected: 15.5(3)m; 15.6(1)t0a |
| CVE-2017-12304 | 6.1 | Nov 16 | A vulnerability in the IOS daemon (IOSd) web-based management interface of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 15.7(2.0z)m |
| CVE-2016-6404 | 6.1 | Sep 18 | Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE allows remote attackers to inject arbitrary web script or HTML… Affected: 15.5(2)t |
| CVE-2020-3476 | 6.0 | Sep 24 | A vulnerability in the CLI implementation of a specific command of Cisco IOS XE Software could allow an authenticated, local attacker to overwrite arbitrary files in the… Affected: 16.9; 16.10.1 |
| CVE-2020-3201 | 6.0 | Jun 3 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC… Affected: 12.2(18)ixa; 12.2(18)ixb; 12.2(18)ixb1; 12.2(18)ixb2; 12.2(18)ixc; 12.2(18)ixd; +34 more |
| CVE-2023-20081 | 5.9 | Mar 23 | A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and… Affected: 17.8.1 |
| CVE-2019-1757 | 5.9 | Mar 28 | A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive… Affected: 2.3; 12.2(6)i1; 12.4(25e)jap1m; 12.4(25e)jap2; 12.4(25e)jap26; 12.4(25e)jaz1; +34 more |
| CVE-2018-0131 | 5.9 | Aug 14 | A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the… Affected: 15.5(3)s |
| CVE-2017-12228 | 5.9 | Sep 29 | A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow an unauthenticated, remote attacker to… Affected: 12.4(25e)jao3a; 12.4(25e)jao20s; 12.4(25e)jap1n; 12.4(25e)jap9; 15.0(2)ej; 15.0(2)ej1; +34 more |
| CVE-2011-4667 | 5.9 | Sep 25 | The encryption library in Cisco IOS Software 15.2(1)T, 15.2(1)T1, and 15.2(2)T, Cisco NX-OS in Cisco MDS 9222i Multiservice Modular Switch, Cisco MDS 9000 18/4-Port Multiservice… Affected: 12.2(33)sxi; 12.2(33)sxj; 15.2(1)t; 15.2(1)t1; 15.2(2)t |
| CVE-2017-3850 | 5.9 | Mar 21 | A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE Software (3.7 through 3.18, and 16) could allow… Affected: 15.2(3)e; 15.2(3)e1; 15.2(3)e2; 15.2(3)e3; 15.2(4)e; 15.2(4)e1; +34 more |
| CVE-2016-6403 | 5.9 | Sep 18 | The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted… Affected: through 15.6\(1\)t |
| CVE-2024-20465 | 5.8 | Sep 25 | A vulnerability in the access control list (ACL) programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches could allow an… Affected: 15.2(8)e2; 15.2(8)e3; 15.2(8)e4; 15.2(8)e5 |
| CVE-2021-1377 | 5.8 | Mar 24 | A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent an… Affected: 12.2(6)i1; 15.1(3)svr1; 15.1(3)svr2; 15.1(3)svr3; 15.1(3)svs; 15.1(3)svs1; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)