CI
Product
Cisco IOS XE Software
On CISA KEVExploited in the wild
117
CVEs
6
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 69Medium 40Low 0
Watch
Add Cisco IOS XE Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20308 | 7.5 | Mar 27 | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow,… Affected: 3.7.0S; 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; +34 more |
| CVE-2024-20314 | 7.5 | Mar 27 | A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU… Affected: 16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; +34 more |
| CVE-2024-20311 | 7.5 | Mar 27 | A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an… Affected: 3.7.0S; 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; +34 more |
| CVE-2023-20227 | 7.5 | Sep 27 | A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 16.8.1; 16.8.1a; 16.8.1b; 16.8.1s; 16.8.1c; 16.8.1d; +34 more |
| CVE-2023-20226 | 7.5 | Sep 27 | A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an… Affected: 17.7.1; 17.7.1a; 17.7.2; 17.10.1; 17.10.1a; 17.8.1; +5 more |
| CVE-2023-20187 | 7.5 | Sep 27 | A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an… Affected: 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; 3.7.6S; +34 more |
| CVE-2022-20856 | 7.5 | Sep 30 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2022-20848 | 7.5 | Sep 30 | Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2022-20847 | 7.5 | Sep 30 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2026-20004 | 7.4 | Mar 25 | A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device Affected: 16.9.1; 16.9.2; 16.9.1a; 16.9.1b; 16.9.1s; 16.9.3; +34 more |
| CVE-2025-20311 | 7.4 | Sep 24 | A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an… Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.5; 16.6.4a; +34 more |
| CVE-2025-20140 | 7.4 | May 7 | A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent wireless… Affected: 16.4.1; 16.4.2; 16.4.3; 16.5.1; 16.5.1a; 16.5.1b; +34 more |
| CVE-2025-20189 | 7.4 | May 7 | A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could… Affected: 3.16.0S; 3.16.1S; 3.16.1aS; 3.16.2S; 3.16.2aS; 3.16.0cS; +34 more |
| CVE-2025-20202 | 7.4 | May 7 | A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device Affected: 16.10.1; 16.10.1a; 16.10.1b; 16.10.1s; 16.10.1c; 16.10.1e; +34 more |
| CVE-2024-20313 | 7.4 | Apr 24 | A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload… Affected: 17.5.1; 17.5.1a; 17.6.1; 17.6.2; 17.6.1w; 17.6.1a; +32 more |
| CVE-2024-20303 | 7.4 | Mar 27 | A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause… Affected: 17.2.1; 17.2.1r; 17.2.1a; 17.2.1v; 17.2.2; 17.2.3; +34 more |
| CVE-2024-20312 | 7.4 | Mar 27 | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent… Affected: 3.7.0S; 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; +34 more |
| CVE-2022-20915 | 7.4 | Oct 10 | Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2022-20851 | 7.2 | Sep 30 | Cisco IOS XE Software Web UI Command Injection Vulnerability Affected: All versions, or not specified |