IO
Product
IOS
On CISA KEVExploited in the wild
618
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 134Medium 81Low 1
Watch
Add IOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-1100 | – | Feb 13 | The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted… Affected: All versions, or not specified |
| CVE-2012-4623 | – | Sep 27 | The DHCPv6 server in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x, 3.1.xS before 3.1.4S, 3.1.xSG and 3.2.xSG before 3.2.5SG, 3.2.xS, 3.2.xXO,… Affected: 12.3; 12.3(1a); 12.3(2)ja; 12.3(2)ja5; 12.3(2)jk; 12.3(2)jk1; +34 more |
| CVE-2012-4621 | – | Sep 27 | The Device Sensor feature in Cisco IOS 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via a DHCP packet, aka Bug ID CSCty96049 Affected: 15.0; 15.0(1)se; 15.1; 15.2 |
| CVE-2012-4620 | – | Sep 27 | Cisco IOS 12.2 and 15.0 through 15.2 on Cisco 10000 series routers, when a tunnel interface exists, allows remote attackers to cause a denial of service (interface queue wedge)… Affected: 12.2; 15.0; 15.0(1)se; 15.1; 15.2 |
| CVE-2012-4619 | – | Sep 27 | The NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via transit IP packets, aka Bug ID… Affected: 12.2; 12.4; 15.0; 15.0(1)se; 15.1; 15.2 |
| CVE-2012-4618 | – | Sep 27 | The SIP ALG feature in the NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via transit IP… Affected: 12.2; 12.4; 15.0; 15.0(1)se; 15.1; 15.2 |
| CVE-2012-4617 | – | Sep 27 | The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of service (multiple connection… Affected: 15.2 |
| CVE-2012-3950 | – | Sep 27 | The Intrusion Prevention System (IPS) feature in Cisco IOS 12.3 through 12.4 and 15.0 through 15.2, in certain configurations of enabled categories and missing signatures, allows… Affected: 12.3; 12.3(1a); 12.3(2)ja; 12.3(2)ja5; 12.3(2)jk; 12.3(2)jk1; +34 more |
| CVE-2012-3949 | – | Sep 27 | The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5, 8.x before 8.5(1)su4, and 8.6 before 8.6(2a)su1; Cisco IOS 12.2 through 12.4… Affected: 12.2; 12.2b; 12.2bc; 12.2bw; 12.2bx; 12.2by; +34 more |
| CVE-2012-3924 | – | Sep 16 | The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users… Affected: 15.1; 15.2 |
| CVE-2012-3923 | – | Sep 16 | The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote… Affected: 12.4; 15.0; 15.1; 15.2 |
| CVE-2012-3915 | – | Sep 16 | The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service (persistent IKE state) via a large volume of hub-to-spoke traffic, aka Bug… Affected: 15.2 |
| CVE-2012-3895 | – | Sep 16 | Cisco IOS 15.0 through 15.3 allows remote authenticated users to cause a denial of service (device crash) via an MVPNv6 update, aka Bug ID CSCty89224 Affected: 15.0; 15.0(1)se; 15.1; 15.2; 15.3 |
| CVE-2012-3893 | – | Sep 16 | The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service (spoke crash) via spoke-to-spoke traffic, aka Bug ID… Affected: 15.2; 15.3 |
| CVE-2012-3079 | – | Sep 16 | Cisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by establishing many IPv6 neighbors, aka Bug ID CSCtn78957 Affected: 12.2 |
| CVE-2012-1361 | – | Aug 6 | Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive… Affected: 15.1; 15.2 |
| CVE-2012-1350 | – | Aug 6 | Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3281 packets, aka Bug ID… Affected: 12.3; 12.3(1a); 12.3(2)ja; 12.3(2)ja5; 12.3(2)jk; 12.3(2)jk1; +34 more |
| CVE-2012-1344 | – | Aug 6 | Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service (device reload) by using a web browser to refresh… Affected: 15.1; 15.2 |
| CVE-2012-1338 | – | Aug 6 | Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service (device reload) by completing local web… Affected: 15.0; 15.1 |
| CVE-2012-1367 | – | Aug 6 | The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (Route Processor crash) via a BGP UPDATE message… Affected: 12.0; 12.2; 15.0; 15.1; 15.2 |
| CVE-2012-1327 | – | May 3 | dot11t/t_if_dot11_hal_ath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (assertion failure and reboot) via 802.11 wireless… Affected: 12.3; 12.4; 15.0; 15.1 |
| CVE-2012-1324 | – | May 3 | Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, allows remote attackers to cause a denial of service (device crash) by… Affected: 15.1; 15.2 |
| CVE-2011-4231 | – | May 3 | Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service… Affected: 15.1; 15.2 |
| CVE-2011-4019 | – | May 3 | Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager (CUCM) 7.x, allows remote attackers to cause a denial of service (memory consumption)… Affected: 12.4; 15.0; 15.1; 15.2 |
| CVE-2012-0362 | – | May 2 | The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended… Affected: 12.2(58)ses; 15.0(1)se |
| CVE-2012-0339 | – | May 2 | Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET… Affected: 12.2; 12.3; 12.4; 15.0 |
| CVE-2012-0338 | – | May 2 | Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH… Affected: 12.2; 12.3; 12.4; 15.0 |
| CVE-2011-4016 | – | May 2 | The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2, when Point-to-Point Termination and Aggregation (PTA) and L2TP are used, allows remote attackers to cause a denial… Affected: 12.2; 15.0; 15.1; 15.2 |
| CVE-2011-4015 | – | May 2 | Cisco IOS 15.2S allows remote attackers to cause a denial of service (interface queue wedge) via malformed UDP traffic on port 465, aka Bug ID CSCts48300 Affected: 15.2s |
| CVE-2011-4012 | – | May 2 | Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3C (PFC3C) is used, does not create a fragment entry during processing of an ICMPv6 ACL, which has unspecified impact… Affected: 12.0; 15.0; 15.1 |
| CVE-2011-4007 | – | May 2 | Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the "set mpls experimental imposition" command, which allows remote attackers to cause a denial of service (device… Affected: 15.0; 15.1 |
| CVE-2011-3289 | – | May 2 | Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified… Affected: 12.4; 15.0; 15.1; 15.2 |
| CVE-2011-2586 | – | May 2 | The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service (device crash) via a malformed HTTP response to a request for service… Affected: 12.4; 15.0 |
| CVE-2011-2578 | – | May 2 | Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption) via malformed SIP packets on a NAT interface, aka Bug ID… Affected: 15.1; 15.2 |
| CVE-2012-1315 | – | Mar 29 | Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory… Affected: 12.4; 15.0; 15.1; 15.2 |
| CVE-2012-1314 | – | Mar 29 | The WAAS Express feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit traffic, aka Bug… Affected: 15.1; 15.2 |
| CVE-2012-1312 | – | Mar 29 | The MACE feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (device reload) via crafted transit traffic, aka Bug IDs CSCtq64987 and CSCtu57226 Affected: 15.1; 15.2 |
| CVE-2012-1311 | – | Mar 29 | The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of… Affected: 15.0; 15.1 |
| CVE-2012-1310 | – | Mar 29 | Memory leak in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via… Affected: 12.4; 15.0; 15.1; 15.2 |
| CVE-2012-0388 | – | Mar 29 | Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory… Affected: 12.4; 15.0; 15.1; 15.2 |
| CVE-2012-0387 | – | Mar 29 | Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory… Affected: 12.4; 15.0; 15.1; 15.2 |
| CVE-2012-0386 | – | Mar 29 | The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S allows remote attackers to cause a… Affected: 12.2; 12.4; 15.0; 15.1; 15.2 |
| CVE-2012-0385 | – | Mar 29 | The Smart Install feature in Cisco IOS 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (device reload) by sending a malformed Smart Install message… Affected: 12.2; 15.0; 15.1; 15.2 |
| CVE-2012-0383 | – | Mar 29 | Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (memory consumption, and device hang or reload) via SIP… Affected: 12.4; 15.0; 15.1 |
| CVE-2011-0941 | – | Nov 1 | Memory leak in Cisco Unified Communications Manager (CUCM) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 before 8.5(1), and Cisco IOS 12.4 and 15.1,… Affected: 12.4; 15.1 |
| CVE-2011-2059 | – | Oct 22 | The ipv6 component in Cisco IOS before 15.1(4)M1.3 allows remote attackers to conduct fingerprinting attacks and obtain potentially sensitive information about the presence of the… Affected: before 15.1\(4\)m1.3 |
| CVE-2011-3282 | – | Oct 3 | Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to… Affected: 12.2(33)sre; 12.2(33)sre0a; 12.2(33)sre1; 12.2(33)sre2; 12.2(33)sre3; 12.2sre; +2 more |
| CVE-2011-3281 | – | Oct 3 | Unspecified vulnerability in Cisco IOS 15.0 through 15.1, in certain HTTP Layer 7 Application Control and Inspection configurations, allows remote attackers to cause a denial of… Affected: 15.0; 15.0m; 15.0sg; 15.0xa; 15.0xo; 15.1; +5 more |
| CVE-2011-3279 | – | Oct 3 | The provider-edge MPLS NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (device… Affected: 12.1 through 12.4; 15.0 through 15.1 |
| CVE-2011-3278 | – | Oct 3 | Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service… Affected: 12.1; 12.1e; 12.2; 12.2b; 12.2bc; 12.2bx; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)