IO
Product
IOS
On CISA KEVExploited in the wild
620
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 135Medium 82Low 1
Watch
Add IOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-5014 | – | Apr 23 | Cisco IOS before 15.1(2)SY allows remote authenticated users to cause a denial of service (device crash) by establishing an SSH session from a client and then placing this client… Affected: through 15.1\(1\)sy3; 15.1; 15.1(1)sy; 15.1(1)sy1; 15.1(1)sy2 |
| CVE-2012-4658 | – | Apr 23 | The ios-authproxy implementation in Cisco IOS before 15.1(1)SY3 allows remote attackers to cause a denial of service (webauth and HTTP service outage) via vectors that trigger… Affected: through 15.1\(1\)sy2; 15.1; 15.1(1)sy; 15.1(1)sy1 |
| CVE-2012-4651 | – | Apr 23 | Cisco IOS before 15.3(2)T, when scansafe is enabled, allows remote attackers to cause a denial of service (latency) via SYN packets that are not accompanied by SYN-ACK packets… Affected: through 15.3\(3\)m2; 15.3; 15.3(2)s; 15.3(3)m; 15.3(3)m1; 15.3(3)s; +1 more |
| CVE-2012-4638 | – | Apr 23 | Cisco IOS before 15.1(1)SY allows local users to cause a denial of service (device reload) by establishing an outbound SSH session, aka Bug ID CSCto00318 Affected: 15.1 |
| CVE-2012-3918 | – | Apr 23 | Cisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service… Affected: through 15.3\(3\)m2; 15.3; 15.3(2)s; 15.3(3)m; 15.3(3)m1; 15.3(3)s; +1 more |
| CVE-2012-3062 | – | Apr 23 | Cisco IOS before 15.1(1)SY, when Multicast Listener Discovery (MLD) snooping is enabled, allows remote attackers to cause a denial of service (CPU consumption or device crash) via… Affected: 15.1 |
| CVE-2012-1366 | – | Apr 23 | Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device… Affected: 15.1 |
| CVE-2012-1317 | – | Apr 23 | The multicast implementation in Cisco IOS before 15.1(1)SY allows remote attackers to cause a denial of service (Route Processor crash) by sending packets at a high rate, aka Bug… Affected: 15.1 |
| CVE-2012-0360 | – | Apr 23 | Memory leak in Cisco IOS before 15.1(1)SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug… Affected: 15.1 |
| CVE-2014-2143 | – | Apr 4 | The IKE implementation in Cisco IOS 15.4(1)T and earlier and IOS XE allows remote attackers to cause a denial of service (security-association drop) via crafted Main Mode packets,… Affected: through 15.4\(1\)t; 15.0; 15.0(1)se; 15.1; 15.2; 15.3; +7 more |
| CVE-2014-2131 | – | Mar 29 | The packet driver in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a series of (1) Virtual Switching Systems (VSS) or (2) Bidirectional… Affected: All versions, or not specified |
| CVE-2014-2113 | – | Mar 27 | Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service (I/O… Affected: 15.1; 15.2; 15.3 |
| CVE-2014-2112 | – | Mar 27 | The SSL VPN (aka WebVPN) feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP requests, aka Bug ID… Affected: 15.1; 15.2; 15.3; 15.4 |
| CVE-2014-2111 | – | Mar 27 | The Application Layer Gateway (ALG) module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (device… Affected: 12.2; 12.3; 12.4; 15.0; 15.1; 15.2; +2 more |
| CVE-2014-2109 | – | Mar 27 | The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (memory consumption or device… Affected: 12.2; 12.3; 12.4; 15.0; 15.1; 15.2; +2 more |
| CVE-2014-2108 | – | Mar 27 | Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service (device… Affected: 12.2; 15.0; 15.0(1)se; 15.1; 15.2; 15.3 |
| CVE-2014-2107 | – | Mar 27 | Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of… Affected: 12.2; 15.0; 15.0(1)se; 15.1; 15.2; 15.3 |
| CVE-2014-2106 | – | Mar 27 | Cisco IOS 15.3M before 15.3(3)M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID… Affected: 15.3(3)m; 15.3(3)m1 |
| CVE-2014-2124 | – | Mar 21 | Cisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst 6500 devices, allows remote attackers to cause a denial of service (device crash) via… Affected: through 15.1\(2\)sy3 |
| CVE-2013-6705 | – | Dec 3 | The IP Device Tracking (IPDT) feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (IPDT AVL corruption and device reload) via a crafted sequence… Affected: All versions, or not specified |
| CVE-2013-6694 | – | Nov 22 | The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service (MTU change and tunnel-session drop) via crafted ICMP packets, aka Bug ID CSCul29918 Affected: All versions, or not specified |
| CVE-2013-6693 | – | Nov 22 | The MLDP implementation in Cisco IOS 15.3(3)S and earlier on 7600 routers, when many VRFs are configured, allows remote attackers to cause a denial of service (chunk corruption… Affected: through 15.3\(3\)s; 15.3(2)s; 15.3s |
| CVE-2013-6686 | – | Nov 18 | The SSL VPN implementation in Cisco IOS 15.3(1)T2 and earlier allows remote authenticated users to cause a denial of service (interface queue wedge) via crafted DTLS packets in an… Affected: through 15.3; 15.0; 15.0(1)se; 15.1; 15.2 |
| CVE-2013-5552 | – | Nov 13 | Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass… Affected: through 12.4\(24\)mdb14; 12.4(24)md; 12.4(24)md1; 12.4(24)md2; 12.4(24)md3; 12.4(24)md4; +19 more |
| CVE-2013-5553 | – | Nov 8 | Multiple memory leaks in Cisco IOS 15.1 before 15.1(4)M7 allow remote attackers to cause a denial of service (memory consumption or device reload) by sending a crafted SIP message… Affected: 15.1 |
| CVE-2013-5548 | – | Nov 1 | The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID… Affected: All versions, or not specified |
| CVE-2013-5522 | – | Oct 25 | Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID… Affected: All versions, or not specified |
| CVE-2013-5527 | – | Oct 10 | The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted options in an LSA type 11 packet, aka Bug ID… Affected: All versions, or not specified |
| CVE-2013-5499 | – | Oct 10 | The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service (device reload) by acquiring a lease and then sending a DHCPRELEASE… Affected: All versions, or not specified |
| CVE-2013-5481 | – | Sep 27 | The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reload) via crafted TCP port-1723… Affected: 12.2; 15.0; 15.1; 15.2; 15.3 |
| CVE-2013-5480 | – | Sep 27 | The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4… Affected: 12.2; 15.0; 15.1; 15.2; 15.3 |
| CVE-2013-5479 | – | Sep 27 | The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4… Affected: 12.2; 15.0; 15.1; 15.2; 15.3 |
| CVE-2013-5478 | – | Sep 27 | Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows remote attackers to cause a denial of service (interface queue wedge) via crafted UDP… Affected: 15.0; 15.1; 15.2; 15.3 |
| CVE-2013-5477 | – | Sep 27 | The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows remote attackers to cause a denial of service (interface queue… Affected: 12.2; 15.0; 15.1; 15.2; 15.3 |
| CVE-2013-5476 | – | Sep 27 | The Zone-Based Firewall (ZFW) feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows remote attackers to cause a denial of… Affected: 15.1; 15.2 |
| CVE-2013-5475 | – | Sep 27 | Cisco IOS 12.2 through 12.4 and 15.0 through 15.3, and IOS XE 2.1 through 3.9, allows remote attackers to cause a denial of service (device reload) via crafted DHCP packets that… Affected: 12.2; 12.3; 12.4; 15.0; 15.1; 15.2; +1 more |
| CVE-2013-5474 | – | Sep 27 | Race condition in the IPv6 virtual fragmentation reassembly (VFR) implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.3 allows remote attackers to cause a denial of… Affected: 12.2; 12.3; 12.4; 15.0; 15.1; 15.2; +1 more |
| CVE-2013-5473 | – | Sep 27 | Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service (memory… Affected: 12.2; 15.1; 15.2 |
| CVE-2013-5472 | – | Sep 27 | The NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1 through 3.3, does not properly handle encapsulation of multicast NTP packets within… Affected: 12.0; 12.1; 12.2; 12.3; 12.4; 15.0; +1 more |
| CVE-2013-5469 | – | Aug 30 | The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of… Affected: All versions, or not specified |
| CVE-2013-0149 | – | Aug 5 | The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488… Affected: 12.0; 12.0(1); 12.0(1)s; 12.0(1)st; 12.0(1)w; 12.0(1)xa3; +34 more |
| CVE-2013-3436 | – | Jul 19 | The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation (GDOI) traffic… Affected: All versions, or not specified |
| CVE-2013-1136 | – | May 13 | The crypto engine process in Cisco IOS on Aggregation Services Router (ASR) Route Processor 2 does not properly manage memory, which allows local users to cause a denial of… Affected: All versions, or not specified |
| CVE-2013-1241 | – | May 8 | The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated users to cause a denial of service (module… Affected: All versions, or not specified |
| CVE-2013-1217 | – | Apr 24 | The generic input/output control implementation in Cisco IOS does not properly manage buffers, which allows remote authenticated users to cause a denial of service (device reload)… Affected: All versions, or not specified |
| CVE-2013-1148 | – | Mar 28 | The General Responder implementation in the IP Service Level Agreement (SLA) feature in Cisco IOS 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS… Affected: 15.2 |
| CVE-2013-1147 | – | Mar 28 | The Protocol Translation (PT) functionality in Cisco IOS 12.3 through 12.4 and 15.0 through 15.3, when one-step port-23 translation or a Telnet-to-PAD ruleset is configured, does… Affected: 12.3; 12.4; 15.0; 15.1; 15.2; 15.3 |
| CVE-2013-1146 | – | Mar 28 | The Smart Install client functionality in Cisco IOS 12.2 and 15.0 through 15.3 on Catalyst switches allows remote attackers to cause a denial of service (device reload) via… Affected: 12.2; 15.0; 15.0(1)se; 15.1; 15.2; 15.3 |
| CVE-2013-1145 | – | Mar 28 | Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway inspection is enabled, allows remote attackers to cause a denial… Affected: 12.2; 12.4; 15.0; 15.1 |
| CVE-2013-1144 | – | Mar 28 | Memory leak in the IKEv1 implementation in Cisco IOS 15.1 allows remote attackers to cause a denial of service (memory consumption) via unspecified (1) IPv4 or (2) IPv6 IKE… Affected: 15.1 |
The 500 most important CVEs for this product (exploited first, then by severity)