IO
Product
IOS
On CISA KEVExploited in the wild
620
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 135Medium 82Low 1
Watch
Add IOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-0649 | – | Mar 26 | Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) TCP packets, aka Bug… Affected: 12.2(33)ird1; 12.2(33)ire3; 12.2(33)sxi4b; 12.2(44)sq1; 12.2(52)se; 12.2(52)se1; +34 more |
| CVE-2015-0648 | – | Mar 26 | Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Common Industrial Protocol (CIP)… Affected: 12.2(33)ird1; 12.2(33)ire3; 12.2(33)sxi4b; 12.2(44)ex; 12.2(44)ex1; 12.2(44)sq1; +34 more |
| CVE-2015-0647 | – | Mar 26 | Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) UDP packets, aka Bug… Affected: 12.2(33)ird1; 12.2(33)ire3; 12.2(33)sxi4b; 12.2(44)ex; 12.2(44)ex1; 12.2(44)sq1; +34 more |
| CVE-2015-0646 | – | Mar 26 | Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and… Affected: 12.2; 12.4; 15.0; 15.1; 15.2; 15.3; +1 more |
| CVE-2015-0643 | – | Mar 26 | Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and… Affected: 12.2; 12.4; 15.0; 15.1; 15.2; 15.3; +1 more |
| CVE-2015-0642 | – | Mar 26 | Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and… Affected: 12.2; 12.4; 15.0; 15.1; 15.2; 15.3; +1 more |
| CVE-2015-0638 | – | Mar 26 | Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge) via crafted ICMPv4… Affected: 12.2(33)ird1; 12.2(33)ire3; 12.2(33)sxi4b; 12.2(44)sq1; 12.4(25e)jam1; 12.4(25e)jap1m; +25 more |
| CVE-2015-0637 | – | Mar 26 | The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote… Affected: 12.2(33)ird1; 12.2(33)ire3; 12.2(33)sxi4b; 12.2(44)sq1; 12.4(25e)jam1; 12.4(25e)jap1m; +22 more |
| CVE-2015-0636 | – | Mar 26 | The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote… Affected: 12.2(33)ird1; 12.2(33)ire3; 12.2(33)sxi4b; 12.2(44)sq1; 12.4(25e)jam1; 12.4(25e)jap1m; +17 more |
| CVE-2015-0635 | – | Mar 26 | The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote… Affected: 12.2(33)ird1; 12.2(33)ire3; 12.2(33)sxi4b; 12.2(44)sq1; 12.4(25e)jam1; 12.4(25e)jap1m; +23 more |
| CVE-2015-0669 | – | Mar 21 | The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 15.4S and 15.4(3)S allows remote attackers to modify configuration settings or cause a denial of service… Affected: 15.4(3)s; 15.4s |
| CVE-2015-0659 | – | Mar 6 | The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS allows remote attackers to trigger self-referential adjacencies via a crafted Autonomic Networking (AN)… Affected: All versions, or not specified |
| CVE-2015-0607 | – | Mar 6 | The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass… Affected: 15.4(1)t; 15.4(1)t1; 15.4(1)t2; 15.4(1)t3; 15.4(1)t4; 15.4(2)t; +5 more |
| CVE-2015-0598 | – | Mar 6 | The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted IPv6 Attributes in Access-Accept packets, aka… Affected: All versions, or not specified |
| CVE-2015-0632 | – | Feb 27 | Race condition in the Neighbor Discovery (ND) protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a flood of Router… Affected: All versions, or not specified |
| CVE-2015-0609 | – | Feb 16 | Race condition in the Common Classification Engine (CCE) in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows… Affected: through 15.4\(2\)t3; 15.4(1)t; 15.4(1)t1; 15.4(1)t2; 15.4(1)t3; 15.4(1)t4; +4 more |
| CVE-2015-0593 | – | Feb 13 | The Zone-Based Firewall implementation in Cisco IOS 12.4(122)T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of… Affected: 15.4(1.12)t; 15.4(1.19)t |
| CVE-2015-0610 | – | Feb 12 | Race condition in the object-group ACL feature in Cisco IOS 15.5(2)T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that… Affected: through 15.5\(2\)t; 15.5(1)t; 15.5(1)t1; 15.5t |
| CVE-2015-0608 | – | Feb 12 | Race condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of… Affected: through 15.4\(2\)t3; 15.4(1)t; 15.4(1)t1; 15.4(1)t2; 15.4(1)t3; 15.4(1)t4; +4 more |
| CVE-2015-0606 | – | Feb 12 | The IOS Shell in Cisco IOS allows local users to cause a denial of service (device crash) via unspecified commands, aka Bug ID CSCur59696 Affected: All versions, or not specified |
| CVE-2015-0592 | – | Feb 12 | The Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that… Affected: through 15.4\(2\)t3; 15.4(1)t; 15.4(1)t1; 15.4(1)t2; 15.4(1)t3; 15.4(1)t4; +4 more |
| CVE-2015-0586 | – | Jan 28 | The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15.3(100)M and earlier on Cisco 2900 Integrated Services Router (aka Cisco Internet Router)… Affected: through 15.3\(100\)m |
| CVE-2014-7992 | – | Nov 18 | The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensitive credential information from process memory via a session… Affected: All versions, or not specified |
| CVE-2014-7998 | – | Nov 15 | Cisco IOS on Aironet access points, when "dot11 aaa authenticator" debugging is enabled, allows remote attackers to cause a denial of service via a malformed EAP packet, aka Bug… Affected: All versions, or not specified |
| CVE-2014-7997 | – | Nov 15 | The DHCP implementation in Cisco IOS on Aironet access points does not properly handle error conditions with short leases and unsuccessful lease-renewal attempts, which allows… Affected: All versions, or not specified |
| CVE-2014-3293 | – | Oct 28 | Cisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet processing, which allows remote attackers to cause a denial of service (BGP… Affected: 15.4(3)s0b |
| CVE-2014-3409 | – | Oct 25 | The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of… Affected: through 12.2\(33\)sre9a |
| CVE-2014-3361 | – | Sep 25 | The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service (device reload) via multipart… Affected: 15.0; 15.1; 15.2; 15.3; 15.4 |
| CVE-2014-3360 | – | Sep 25 | Cisco IOS 12.4 and 15.0 through 15.4 and IOS XE 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and 3.11.xS… Affected: 15.1; 15.2; 15.3; 15.4 |
| CVE-2014-3359 | – | Sep 25 | Memory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and 3.11.xS before 3.12S allows… Affected: 15.1; 15.2; 15.3; 15.4 |
| CVE-2014-3358 | – | Sep 25 | Memory leak in Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allows remote… Affected: 15.0; 15.1; 15.2; 15.4 |
| CVE-2014-3357 | – | Sep 25 | Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allow remote attackers to cause a… Affected: 15.0; 15.1; 15.2; 15.4 |
| CVE-2014-3354 | – | Sep 25 | Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS,… Affected: 12.0; 12.2; 12.4; 15.0; 15.1; 15.2; +1 more |
| CVE-2014-3347 | – | Aug 28 | Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging… Affected: 15.1(4)m2 |
| CVE-2014-3327 | – | Aug 11 | The EnergyWise module in Cisco IOS 12.2, 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.2.xXO, 3.3.xSG, 3.4.xSG, and 3.5.xE before 3.5.3E allows remote attackers to cause a denial of… Affected: 12.2; 15.0; 15.1; 15.2; 15.4 |
| CVE-2014-3309 | – | Jul 9 | The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass… Affected: All versions, or not specified |
| CVE-2014-3299 | – | Jun 25 | Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets, aka Bug ID CSCui79745 Affected: All versions, or not specified |
| CVE-2014-3273 | – | May 20 | The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a malformed packet, aka Bug ID CSCum96282 Affected: All versions, or not specified |
| CVE-2014-3268 | – | May 20 | Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service (input-queue consumption and traffic-processing outage) via… Affected: 15.2(4)m4 |
| CVE-2014-3263 | – | May 16 | The ScanSafe module in Cisco IOS 15.3(3)M allows remote attackers to cause a denial of service (device reload) via HTTPS packets that require tower processing, aka Bug ID… Affected: 15.3(3)m; 15.3m |
| CVE-2014-3262 | – | May 16 | The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows… Affected: through 15.3\(3\)s; 15.3(3)m; 15.3m; 15.3s |
| CVE-2012-3946 | – | Apr 24 | Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which… Affected: through 15.3 |
| CVE-2012-5427 | – | Apr 23 | Cisco IOS Unified Border Element (CUBE) in Cisco IOS before 15.3(2)T allows remote authenticated users to cause a denial of service (input queue wedge) via a crafted series of… Affected: through 15.3\(2\)s; 15.3 |
| CVE-2012-5422 | – | Apr 23 | Unspecified vulnerability in Cisco IOS before 15.3(2)T on AS5400 devices allows remote authenticated users to cause a denial of service (spurious errors) via unknown vectors, aka… Affected: through 15.3\(2\)s; 15.3 |
| CVE-2012-5044 | – | Apr 23 | Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (media loops and stack memory corruption) via VoIP traffic, aka… Affected: through 15.2\(2\)t |
| CVE-2012-5039 | – | Apr 23 | The BGP Router process in Cisco IOS before 12.2(50)SY1 allows remote attackers to cause a denial of service (memory consumption) via vectors involving BGP path attributes, aka Bug… Affected: through 12.2\(50\)sy |
| CVE-2012-5037 | – | Apr 23 | The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service (device reload) via a "no object-group"… Affected: through 15.1 |
| CVE-2012-5036 | – | Apr 23 | Cisco IOS before 12.2(50)SY1 allows remote authenticated users to cause a denial of service (memory consumption) via a sequence of VTY management sessions (aka exec sessions), aka… Affected: 12.2(33)sxi4; 12.2(33)sxi5; 12.2(33)sxi6; 12.2(33)sxi7; 12.2(33)sxj; 12.2(50)sy |
| CVE-2012-5032 | – | Apr 23 | The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.1(1)SY3 does not require authentication, which allows remote attackers to trigger the… Affected: through 15.1\(1\)sy2; 15.1; 15.1(1)sy; 15.1(1)sy1 |
| CVE-2012-5017 | – | Apr 23 | Cisco IOS before 15.1(1)SY1 allows remote authenticated users to cause a denial of service (device reload) by establishing a VPN session and then sending malformed IKEv2 packets,… Affected: through 15.1\(1\)sy; 15.1 |
The 500 most important CVEs for this product (exploited first, then by severity)