IO
Product
IOS
On CISA KEVExploited in the wild
622
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 136Medium 83Low 1
Watch
Add IOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20225 | 5.8 | Aug 14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and… Affected: 15.1(2)T; 15.1(1)T4; 15.1(3)T2; 15.1(1)T1; 15.1(2)T0a; 15.1(3)T3; +34 more |
| CVE-2024-20465 | 5.8 | Sep 25 | A vulnerability in the access control list (ACL) programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches could allow an… Affected: 15.2(8)e2; 15.2(8)e3; 15.2(8)e4; 15.2(8)e5 |
| CVE-2021-1377 | 5.8 | Mar 24 | A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent an… Affected: 12.2(6)i1; 15.1(3)svr1; 15.1(3)svr2; 15.1(3)svr3; 15.1(3)svs; 15.1(3)svs1; +34 more |
| CVE-2020-3477 | 5.5 | Sep 24 | A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem Affected: 16.3.11 |
| CVE-2018-0123 | 5.5 | Feb 8 | A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to use certain diagnostic shell commands that… Affected: 16.7(1) |
| CVE-2010-3049 | 5.5 | Sep 25 | Cisco IOS before 12.2(33)SXI allows local users to cause a denial of service (device reboot) Affected: through 12.2\(33\)sxh2 |
| CVE-2025-20196 | 5.3 | May 7 | A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco… Affected: All versions, or not specified |
| CVE-2022-20724 | 5.3 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 15.2(5)e1; 15.2(5)e2c; 15.2(6)e0a; 15.2(6)e1; 15.2(6)e2a; 15.2(7)e; +34 more |
| CVE-2021-34705 | 5.3 | Sep 23 | A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass… Affected: 12.3(7)xm; 12.3(7)xr; 12.3(7)xr1; 12.3(7)xr2; 12.3(7)xr3; 12.3(7)xr4; +34 more |
| CVE-2020-3315 | 5.3 | May 6 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured file policies… Affected: 15.2(7)e |
| CVE-2017-12211 | 5.3 | Sep 7 | A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause high CPU… Affected: 3.16.1 |
| CVE-2017-6624 | 5.3 | May 3 | A vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could allow an unauthenticated, remote attacker to make unauthorized phone calls Affected: 15.5(3)m |
| CVE-2016-6398 | 5.3 | Sep 12 | The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obtain sensitive information from earlier network communication… Affected: 15.5(3)m |
| CVE-2016-1459 | 5.3 | Jul 17 | Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service (device reload) via crafted attributes in a BGP… Affected: 12.4(4)xc7; 12.4(15)t17; 12.4(19a); 12.4(22)yb2; 12.4(24)gc4; 12.4(24)gc5; +20 more |
| CVE-2016-1378 | 5.3 | Apr 14 | Cisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services… Affected: 15.1(1)sg; 15.1(1)sg1; 15.1(1)sg2; 15.1(1)sy; 15.1(1)sy1; 15.1(1)sy2; +22 more |
| CVE-2022-20725 | 4.8 | Apr 15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host… Affected: 15.2(5)e1; 15.2(5)e2c; 15.2(6)e0a; 15.2(6)e1; 15.2(6)e2a; 15.2(7)e; +34 more |
| CVE-2019-12668 | 4.8 | Sep 25 | A vulnerability in the web framework code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS)… Affected: 15.2(2)e; 15.2(2)ea; 15.2(3)e; 15.2(3)ea; 15.2(4)e; 15.2(4)ea; +6 more |
| CVE-2025-20137 | 4.7 | May 7 | A vulnerability in the access control list (ACL) programming of Cisco IOS Software that is running on Cisco Catalyst 1000 Switches and Cisco Catalyst 2960L Switches could allow an… Affected: 15.2(5a)E; 15.2(5b)E; 15.2(5c)E; 15.2(6)E; 15.2(6)E1; 15.2(6)E0c; +29 more |
| CVE-2020-3231 | 4.7 | Jun 3 | A vulnerability in the 802.1X feature of Cisco Catalyst 2960-L Series Switches and Cisco Catalyst CDB-8P Switches could allow an unauthenticated, adjacent attacker to forward… Affected: 15.2(5)e2; 15.2(5)ex; 15.2(5a)e; 15.2(5b)e; 15.2(5c)e; 15.2(6)e; +16 more |
| CVE-2017-3803 | 4.7 | Jan 26 | A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthenticated, adjacent attacker to cause a memory leak in the… Affected: 15.2(2)e3; 15.2(4)e1 |
| CVE-2022-20661 | 4.6 | Apr 15 | Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot… Affected: 15.2\(5\)ex before 15.2\(7\)e5; 15.2\(5\)ex before 15.2\(7\)e5; 15.2(8)e |
| CVE-2019-1762 | 4.4 | Mar 28 | A vulnerability in the Secure Storage feature of Cisco IOS and IOS XE Software could allow an authenticated, local attacker to access sensitive system information on an affected… Affected: 12.2(6)i1; 15.1(2)sg8a; 15.1(3)svg3d; 15.1(3)svi1b; 15.1(3)svm3; 15.1(3)svn2; +25 more |
| CVE-2017-12289 | 4.4 | Oct 19 | A vulnerability in conditional, verbose debug logging for the IPsec feature of Cisco IOS XE Software could allow an authenticated, local attacker to display sensitive IPsec… Affected: through 16.7.1 |
| CVE-2019-1761 | 4.3 | Mar 28 | A vulnerability in the Hot Standby Router Protocol (HSRP) subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to receive potentially… Affected: 12.2(6)i1; 12.2(33)cx; 12.2(33)cy; 12.2(33)cy1; 12.2(33)cy2; 12.2(33)ira; +34 more |
| CVE-2019-1758 | 4.3 | Mar 28 | A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to… Affected: 12.2(33)sxj6; 12.2(33)sxj7; 12.2(33)sxj8; 12.2(33)sxj9; 12.2(33)sxj10; 12.2(60)ez12; +34 more |
| CVE-2017-6770 | 4.2 | Aug 7 | Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability… Affected: 12.0(1); 12.0(1)t; 12.0(1)xe; 12.0(1a); 12.0(2); 12.0(2)s; +34 more |
| CVE-1999-0524 | 4.0 | Aug 1 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts Affected: All versions, or not specified |
| CVE-1999-0159 | 3.5 | Aug 12 | Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login) Affected: 9.1; 11.0(20.3); 11.1(15)ca; 11.1(16); 11.1(16)aa; 11.1(16)ia; +10 more |
| CVE-2015-6429 | – | Dec 19 | The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service (IPsec connection termination) via a… Affected: 15.4(3)s; 15.5(1)s; 15.5(1)t; 15.5(2)s; 15.5(2)t; 15.5(3)m; +5 more |
| CVE-2015-6359 | – | Dec 15 | The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS 15.3(3)S0.1 on ASR devices mishandles internal tables, which allows remote attackers to cause a… Affected: 15.2(4)e; 15.2(4)pi; 15.2(4)st; 15.2(5)st; 15.3(3)s0.1 |
| CVE-2015-6385 | – | Dec 1 | The publish-event event-manager feature in Cisco IOS 15.5(2)S and 15.5(3)S on Cloud Services Router 1000V devices allows local users to execute arbitrary commands with root… Affected: 15.5(2)s; 15.5(3)s |
| CVE-2015-6375 | – | Nov 21 | The debug-logging (aka debug cns) feature in Cisco Networking Services (CNS) for IOS 15.2(2)E3 allows local users to obtain sensitive information by reading an unspecified file,… Affected: 15.2(2)e3 |
| CVE-2015-6365 | – | Nov 14 | Cisco IOS 15.2(04)M and 15.4(03)M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic… Affected: 15.2(4)m; 15.4(3)m |
| CVE-2015-6366 | – | Nov 13 | Cisco IOS 15.2(04)M6 and 15.4(03)S lets physical-interface ACLs supersede tunnel-interface ACLs, which allows remote attackers to bypass intended network-traffic restrictions in… Affected: 15.2(4)m6; 15.4(3)s |
| CVE-2015-6343 | – | Oct 31 | The SIP implementation in Cisco IOS 15.5(3)M on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service via crafted SIP messages, aka Bug… Affected: 15.5(3)m |
| CVE-2015-6263 | – | Oct 12 | The RADIUS client implementation in Cisco IOS 15.4(3)M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause a denial of service (device reload) via… Affected: 15.4(3)m2.2 |
| CVE-2015-6280 | – | Sep 28 | The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before… Affected: 15.2(1)sy; 15.2(1)sy0a; 15.2(2)e; 15.2(2)e1; 15.2(2)e2; 15.2(2)ea1; +34 more |
| CVE-2015-6279 | – | Sep 28 | The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E… Affected: 12.2(50)sy; 12.2(50)sy1; 12.2(50)sy2; 12.2(50)sy3; 12.2(50)sy4; 15.0(1)ex; +34 more |
| CVE-2015-6278 | – | Sep 28 | The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E… Affected: 12.2(50)sy; 12.2(50)sy1; 12.2(50)sy2; 12.2(50)sy3; 12.2(50)sy4; 15.0(1)ex; +34 more |
| CVE-2015-6294 | – | Sep 18 | Cisco IOS 15.2(3)E and earlier and IOS XE 3.6(2)E and earlier allow remote attackers to cause a denial of service (functionality loss) via crafted Cisco Discovery Protocol (CDP)… Affected: 15.2(2)e; 15.2(2)e1; 15.2(2)e2; 15.2(3)e; 15.2e |
| CVE-2015-0681 | – | Jul 24 | The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x,… Affected: 12.2(33)xn1; 12.2(44)sq1; 12.4(23)jy; 12.4(25e)jam1; 12.4(25e)jao5m; 15.0(2)ed1; +3 more |
| CVE-2015-4199 | – | Jun 27 | Race condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of… Affected: 15.3s |
| CVE-2015-4203 | – | Jun 23 | Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers… Affected: 12.2(33)sch; 12.2sch |
| CVE-2015-4200 | – | Jun 23 | Memory leak in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of service… Affected: 15.3(3)s; 15.3s |
| CVE-2015-4202 | – | Jun 20 | Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers… Affected: 12.2(33)sch; 12.2sch |
| CVE-2015-4185 | – | Jun 13 | The TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows local users to gain privileges by starting a session very soon after a TCL script… Affected: 15.2(4)m6; 15.2m |
| CVE-2015-0771 | – | Jun 12 | The IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500 devices allows remote authenticated users to cause a denial of service (device reload)… Affected: 12.2(33)sxj8; 12.2sxj |
| CVE-2015-0731 | – | May 16 | The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service (device reload) via malformed Q931 SETUP messages, aka Bug ID CSCut37890 Affected: 15.3(3)s1; 15.3s |
| CVE-2015-0709 | – | Apr 29 | Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device crash) by leveraging knowledge of the RADIUS secret and sending crafted RADIUS… Affected: 15.5(3)s; 15.5s |
| CVE-2015-0708 | – | Apr 29 | Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit… Affected: 15.4(3)s; 15.4(3)s1; 15.4(3)sn1; 15.4s; 15.4sn; 15.5(1)s; +1 more |
The 500 most important CVEs for this product (exploited first, then by severity)