IO
Product
IOS
On CISA KEVExploited in the wild
618
CVEs
39
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 134Medium 81Low 1
Watch
Add IOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-3277 | – | Oct 3 | Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service… Affected: 12.1; 12.1e; 12.2; 12.2b; 12.2bc; 12.2bx; +34 more |
| CVE-2011-3276 | – | Oct 3 | Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service… Affected: 12.1; 12.1e; 12.2; 12.2b; 12.2bc; 12.2bx; +34 more |
| CVE-2011-3275 | – | Oct 3 | Memory leak in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service (memory consumption) via a crafted SIP message,… Affected: 12.4; 15.0; 15.1 |
| CVE-2011-3274 | – | Oct 3 | Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to… Affected: 12.2(33)sre; 12.2(33)sre0a; 12.2(33)sre1; 12.2(33)sre2; 12.2(33)sre3; 12.2sre; +2 more |
| CVE-2011-3273 | – | Oct 3 | Memory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall (aka ZBFW) is configured, allows remote attackers to cause a denial of service (memory consumption or… Affected: 15.0; 15.0m; 15.0sg; 15.0xa; 15.0xo; 15.1; +5 more |
| CVE-2011-3272 | – | Oct 3 | The IP Service Level Agreement (IP SLA) functionality in Cisco IOS 15.1, and IOS XE 2.1.x through 3.3.x, allows remote attackers to cause a denial of service (memory corruption… Affected: 15.1 |
| CVE-2011-3271 | – | Oct 3 | Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code or cause a denial of service (device… Affected: 12.2; 15.1 |
| CVE-2011-3270 | – | Oct 3 | Unspecified vulnerability in Cisco IOS 12.2SB before 12.2(33)SB10 and 15.0S before 15.0(1)S3a on Cisco 10000 series routers allows remote attackers to cause a denial of service… Affected: 12.2(28)sb; 12.2(28)sb1; 12.2(28)sb2; 12.2(28)sb3; 12.2(28)sb4; 12.2(28)sb5; +34 more |
| CVE-2011-2072 | – | Oct 3 | Memory leak in Cisco IOS 12.4, 15.0, and 15.1, Cisco IOS XE 2.5.x through 3.2.x, and Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su4, 8.x before… Affected: 12.4; 15.0; 15.1 |
| CVE-2011-0946 | – | Oct 3 | The NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (device reload or hang) via… Affected: 12.1 through 12.4; 15.0 through 15.1 |
| CVE-2011-0945 | – | Oct 3 | Memory leak in the Data-link switching (aka DLSw) feature in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xS before 3.1.3S and 3.2.xS before 3.2.1S, when… Affected: 12.1; 12.1t; 12.1xi; 12.1xj; 12.1xl; 12.1xm; +34 more |
| CVE-2011-0944 | – | Oct 3 | Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets, aka Bug ID CSCtj41194 Affected: 12.4; 15.0; 15.1 |
| CVE-2011-0939 | – | Oct 3 | Unspecified vulnerability in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service (device reload) via a crafted SIP… Affected: 12.4; 15.0; 15.1 |
| CVE-2011-1625 | – | Aug 18 | Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching (DLSw) feature is configured, allows remote attackers to cause a denial of service (device crash) by… Affected: 12.2; 12.3; 12.4; 15.0; 15.1 |
| CVE-2011-1624 | – | Aug 18 | Cisco IOS 12.2(58)SE, when a login banner is configured, allows remote attackers to cause a denial of service (device reload) by establishing two SSH2 sessions, aka Bug ID… Affected: 12.2(58)se |
| CVE-2011-2064 | – | Jul 11 | Cisco IOS 12.4MDA before 12.4(24)MDA5 on the Cisco Content Services Gateway - Second Generation (CSG2) allows remote attackers to cause a denial of service (device reload) via… Affected: 12.4(24)md1; 12.4(24)md2; 12.4(24)md3; 12.4(24)md4; 12.4(24)mda; 12.4mda |
| CVE-2011-2395 | – | Jun 9 | The Neighbor Discovery (ND) protocol implementation in Cisco IOS on unspecified switches allows remote attackers to bypass the Router Advertisement Guarding functionality via a… Affected: 4.1; 4.1.1; 4.1.2; 8.2; 8.3; 9.0; +34 more |
| CVE-2011-0935 | – | Apr 14 | The PKI functionality in Cisco IOS 15.0 and 15.1 does not prevent permanent caching of certain public keys, which allows remote attackers to bypass authentication and have… Affected: 15.0; 15.1 |
| CVE-2011-0350 | – | Jan 28 | Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to cause a denial… Affected: 12.4(24)md; 12.4(24)md1 |
| CVE-2011-0349 | – | Jan 28 | Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to cause a denial… Affected: 12.4(24)md; 12.4(24)md1 |
| CVE-2011-0348 | – | Jan 28 | Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24)MDA3 on the Cisco Content Services… Affected: 12.4(11)md; 12.4(15)md; 12.4(22)md; 12.4(22)mda; 12.4(24)md; 12.4(24)md1; +1 more |
| CVE-2010-4687 | – | Jan 7 | STCAPP (aka the SCCP telephony control application) on Cisco IOS before 15.0(1)XA1 does not properly handle multiple calls to a shared line, which allows remote attackers to cause… Affected: before 15.0\(1\)xa1 |
| CVE-2010-4686 | – | Jan 7 | CallManager Express (CME) on Cisco IOS before 15.0(1)XA1 does not properly handle SIP TRUNK traffic that contains rate bursts and a "peculiar" request size, which allows remote… Affected: before 15.0\(1\)xa1 |
| CVE-2010-4685 | – | Jan 7 | Cisco IOS before 15.0(1)XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by… Affected: before 15.0\(1\)xa1 |
| CVE-2010-4684 | – | Jan 7 | Cisco IOS before 15.0(1)XA1, when certain TFTP debugging is enabled, allows remote attackers to cause a denial of service (device crash) via a TFTP copy over IPv6, aka Bug ID… Affected: before 15.0\(1\)xa1 |
| CVE-2010-4683 | – | Jan 7 | Memory leak in Cisco IOS before 15.0(1)XA5 might allow remote attackers to cause a denial of service (memory consumption) by sending a crafted SIP REGISTER message over UDP, aka… Affected: before 15.0\(1\)xa5 |
| CVE-2009-5040 | – | Jan 7 | CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service (device crash) by using an extension mobility (EM) phone to… Affected: through 15.0xa; 4.1; 4.1.1; 4.1.2; 7.2(2)22; 8.2; +34 more |
| CVE-2009-5039 | – | Jan 7 | Memory leak in the gk_circuit_info_do_in_acf function in the H.323 implementation in Cisco IOS before 15.0(1)XA allows remote attackers to cause a denial of service (memory… Affected: before 15.0\(1\)xa |
| CVE-2009-5038 | – | Jan 7 | Cisco IOS before 15.0(1)XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service… Affected: before 15.0\(1\)xa |
| CVE-2010-4671 | – | Jan 7 | The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS before 15.0(1)XA5 allows remote attackers to cause a denial of service (CPU consumption and… Affected: before 15.0\(1\)xa5 |
| CVE-2010-2836 | – | Sep 23 | Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory… Affected: 12.4; 12.4gc; 12.4mda; 12.4mr; 12.4mra; 12.4sw; +25 more |
| CVE-2010-2835 | – | Sep 23 | Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before… Affected: 12.1; 12.1t; 12.1xi; 12.1xj; 12.1xl; 12.1xm; +34 more |
| CVE-2010-2834 | – | Sep 23 | Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before… Affected: 12.1; 12.1t; 12.1xi; 12.1xj; 12.1xl; 12.1xm; +34 more |
| CVE-2010-2833 | – | Sep 23 | Unspecified vulnerability in the NAT for H.225.0 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service (device… Affected: 12.1; 12.1t; 12.1xi; 12.1xj; 12.1xl; 12.1xm; +34 more |
| CVE-2010-2832 | – | Sep 23 | Unspecified vulnerability in the NAT for H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service (device… Affected: 12.1; 12.1t; 12.1xi; 12.1xj; 12.1xl; 12.1xm; +34 more |
| CVE-2010-2831 | – | Sep 23 | Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service (device… Affected: 12.1; 12.1t; 12.1xi; 12.1xj; 12.1xl; 12.1xm; +34 more |
| CVE-2010-2830 | – | Sep 23 | The IGMPv3 implementation in Cisco IOS 12.2, 12.3, 12.4, and 15.0 and IOS XE 2.5.x before 2.5.2, when PIM is enabled, allows remote attackers to cause a denial of service (device… Affected: 12.2; 12.2b; 12.2bw; 12.2bx; 12.2by; 12.2cz; +34 more |
| CVE-2010-2829 | – | Sep 23 | Unspecified vulnerability in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 2.5.x before 2.5.2 and 2.6.x before 2.6.1, allows remote… Affected: 12.1t; 12.1xi; 12.1xj; 12.1xl; 12.1xm; 12.1xp; +34 more |
| CVE-2010-2828 | – | Sep 23 | Unspecified vulnerability in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 2.5.x before 2.5.2 and 2.6.x before 2.6.1, allows remote… Affected: 12.1t; 12.1xi; 12.1xj; 12.1xl; 12.1xm; 12.1xp; +34 more |
| CVE-2010-2827 | – | Aug 16 | Cisco IOS 15.1(2)T allows remote attackers to cause a denial of service (resource consumption and TCP outage) via spoofed TCP packets, related to embryonic TCP connections that… Affected: 15.1(2)t |
| CVE-2010-1574 | – | Jul 8 | IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of public for RO access and (2) a community name of private for RW… Affected: 12.2(52)se; 12.2(52)se1 |
| CVE-2010-0586 | – | Mar 25 | Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers… Affected: 12.1yd; 12.1ye; 12.1yi; 12.2b; 12.2bx; 12.2by; +34 more |
| CVE-2010-0585 | – | Mar 25 | Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers… Affected: 12.1yd; 12.1ye; 12.1yi; 12.2b; 12.2bx; 12.2by; +34 more |
| CVE-2010-0584 | – | Mar 25 | Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of service (device reload) via crafted… Affected: 12.4gc; 12.4md; 12.4mda; 12.4sw; 12.4t; 12.4xe; +20 more |
| CVE-2010-0583 | – | Mar 25 | Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denial of service (memory consumption and… Affected: 12.1xu; 12.1yd; 12.2b |
| CVE-2010-0582 | – | Mar 25 | Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denial of service (interface queue wedge) via malformed H.323 packets, aka Bug ID… Affected: 12.1xu; 12.1yd; 12.2b; 12.2bw; 12.2bx; 12.2by; +34 more |
| CVE-2010-0581 | – | Mar 25 | Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbitrary code via a malformed SIP message, aka Bug ID… Affected: 12.3jk; 12.3t; 12.3xd; 12.3xf; 12.3xg; 12.3xi; +34 more |
| CVE-2010-0580 | – | Mar 25 | Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbitrary code via a malformed SIP message, aka Bug ID… Affected: 12.3jk; 12.3t; 12.3xd; 12.3xf; 12.3xg; 12.3xi; +34 more |
| CVE-2010-0579 | – | Mar 25 | The SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device reload) via a malformed SIP message, aka Bug ID CSCtb93416, the "SIP… Affected: 12.3jk; 12.3t; 12.3xd; 12.3xf; 12.3xg; 12.3xi; +34 more |
| CVE-2010-0578 | – | Mar 25 | The IKE implementation in Cisco IOS 12.2 through 12.4 on Cisco 7200 and 7301 routers with VAM2+ allows remote attackers to cause a denial of service (device reload) via a… Affected: 12.2sb; 12.2sca; 12.2scb; 12.2scc; 12.2sra; 12.3t; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)