IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3422 | 7.5 | Sep 24 | A vulnerability in the IP Service Level Agreement (SLA) responder feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the IP SLA responder to… Affected: 16.9.3 |
| CVE-2020-3421 | 7.5 | Sep 24 | Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop… Affected: 16.9.3; 17.2 |
| CVE-2020-3230 | 7.5 | Jun 3 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 3.3.0sg; 3.3.0xo; 3.3.1sg; 3.3.1xo; 3.3.2sg; 3.3.2xo; +34 more |
| CVE-2019-12664 | 7.5 | Sep 25 | A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers (ISRs) could allow an… Affected: 16.6.4 |
| CVE-2019-12659 | 7.5 | Sep 25 | A vulnerability in the HTTP server code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the HTTP server to crash Affected: 16.10.1 |
| CVE-2019-12658 | 7.5 | Sep 25 | A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resources on an affected… Affected: 16.6.1; 16.8.1 |
| CVE-2019-12657 | 7.5 | Sep 25 | A vulnerability in Unified Threat Defense (UTD) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload Affected: 16.3.6 |
| CVE-2019-12654 | 7.5 | Sep 25 | A vulnerability in the common Session Initiation Protocol (SIP) library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an… Affected: 15.6(1)s4.2; 16.3.8; 16.9.1 |
| CVE-2019-12653 | 7.5 | Sep 25 | A vulnerability in the Raw Socket Transport feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting… Affected: 16.9; 16.10.1 |
| CVE-2019-12647 | 7.5 | Sep 25 | A vulnerability in the Ident protocol handler of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload Affected: fuji-16.7.1; fuji-16.8.1 |
| CVE-2019-12646 | 7.5 | Sep 25 | A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated,… Affected: 15.4(3)s; 15.5(3)s; 15.6(1)s; 16.3.1; 16.4.1; 16.5.1; +7 more |
| CVE-2019-1752 | 7.5 | Mar 28 | A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload Affected: 3.8.0s; 3.8.1s; 3.8.2s; 3.9.0as; 3.9.0s; 3.9.1as; +34 more |
| CVE-2019-1741 | 7.5 | Mar 28 | A vulnerability in the Cisco Encrypted Traffic Analytics (ETA) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 3.2.0ja; 16.6.1; 16.6.2; 16.6.3; 16.7.1; 16.7.1a; +8 more |
| CVE-2019-1739 | 7.5 | Mar 28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 3.2.0ja; 3.16.0as; 3.16.0bs; 3.16.0cs; 3.16.0s; 3.16.1as; +34 more |
| CVE-2019-1738 | 7.5 | Mar 28 | A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… Affected: 3.2.0ja; 3.16.0as; 3.16.0bs; 3.16.0cs; 3.16.0s; 3.16.1as; +34 more |
| CVE-2018-0177 | 7.5 | Mar 28 | A vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an… Affected: denali-16.3.1; denali-16.3.3 |
| CVE-2018-0170 | 7.5 | Mar 28 | A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition,… Affected: 16.4.1 |
| CVE-2017-6664 | 7.5 | Aug 7 | A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to access the Autonomic Networking… Affected: 3.10.8as; 3.10.8s; 3.12.0s; 3.12.1s; 3.12.2s; 3.12.3s; +23 more |
| CVE-2017-3859 | 7.5 | Mar 22 | A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to… Affected: 3.13.4s; 3.13.5as; 3.13.5s; 3.13.6as; 3.13.6s; 3.14.3s; +27 more |
| CVE-2017-3857 | 7.5 | Mar 22 | A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an… Affected: 3.1.0 through 3.18.0 |
| CVE-2017-3856 | 7.5 | Mar 22 | A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affected device to reload Affected: 3.1.0s; 3.1.0sg; 3.1.1s; 3.1.1sg; 3.1.2s; 3.1.3as; +34 more |
| CVE-2016-6393 | 7.5 | Oct 5 | The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via… Affected: 2.1.0 through 3.18.0; 16.2 |
| CVE-2016-6385 | 7.5 | Oct 5 | Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service… Affected: 3.2.0ja; 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; +26 more |
| CVE-2016-6379 | 7.5 | Oct 5 | Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record (IPDR) packets, aka Bug ID… Affected: 3.14.0s; 3.14.1s; 3.14.2s; 3.14.3s; 3.14.4s; 3.15.0s; +10 more |
| CVE-2016-6378 | 7.5 | Oct 5 | Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets that require NAT, aka Bug ID… Affected: 3.1.3s; 3.1.4as; 3.1.4s; 3.2.1s; 3.2.2s; 3.3.0s; +34 more |
| CVE-2016-6392 | 7.5 | Oct 5 | Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service (device restart) via a crafted IPv4 Multicast Source Discovery… Affected: 3.1.0s; 3.1.1s; 3.1.2s; 3.1.3as; 3.1.4as; 3.1.4s; +34 more |
| CVE-2016-6386 | 7.5 | Oct 5 | Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4… Affected: 3.1.0s; 3.1.0sg; 3.1.1s; 3.1.1sg; 3.1.2s; 3.1.3as; +34 more |
| CVE-2016-6384 | 7.5 | Oct 5 | Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service (device reload) via crafted fields in an… Affected: 3.1 through 3.17; 16.2 |
| CVE-2016-6382 | 7.5 | Oct 5 | Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Protocol Independent… Affected: 3.6.0e; 3.6.1e; 3.6.2ae; 3.6.2e; 3.6.3e; 3.6.4e; +34 more |
| CVE-2016-6381 | 7.5 | Oct 5 | Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented… Affected: 3.1.0s; 3.1.1s; 3.1.2s; 3.1.3as; 3.1.4as; 3.1.4s; +34 more |
| CVE-2016-1409 | 7.5 | May 29 | The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a… Affected: 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1; +34 more |
| CVE-2015-6360 | 7.5 | Apr 21 | The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686 Affected: 3.10s_3.10.0s; 3.10s_3.10.1s; 3.10s_3.10.1xbs; 3.10s_3.10.2s; 3.10s_3.10.2ts; 3.10s_3.10.4s; +14 more |
| CVE-2016-1384 | 7.5 | Apr 20 | The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898 Affected: 3.2.0ja; 3.2.0s; 3.2.0se; 3.2.0sg; 3.2.0xo; 3.2.1s; +34 more |
| CVE-2016-1350 | 7.5 | Mar 26 | Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed… Affected: 3.8.0s; 3.8.1s; 3.8.2s; 3.9.0as; 3.9.0s; 3.9.1as; +7 more |
| CVE-2016-1349 | 7.5 | Mar 26 | The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via… Affected: 3.2ja_3.2.0ja; 3.2se_3.2.0se; 3.2se_3.2.1se; 3.2se_3.2.2se; 3.2se_3.2.3se; 3.3se_3.3.0se; +26 more |
| CVE-2016-1348 | 7.5 | Mar 26 | Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Relay message, aka Bug ID… Affected: 3.3xo_3.3.0xo; 3.3xo_3.3.1xo; 3.3xo_3.3.2xo; 3.5e_3.5.0e; 3.5e_3.5.1e; 3.5e_3.5.2e; +34 more |
| CVE-2012-0382 | 7.5 | Mar 29 | The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS… Affected: 2.1.0 through 2.6.2; 3.1.0s before 3.4.1s; 3.1.0sg before 3.2.2sg |
| CVE-2012-0381 | 7.5 | Mar 29 | The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and… Affected: 2.1.0 through 2.6.2; 3.1.0s before 3.4.1s; 3.1.0sg before 3.2.2sg |
| CVE-2011-3280 | 7.5 | Oct 3 | Memory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (memory… Affected: 3.1.0sg; 3.1.1sg |
| CVE-2026-20004 | 7.4 | Mar 25 | A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device Affected: 16.9.1; 16.9.1a; 16.9.1b; 16.9.1s; 16.9.2; 16.9.3; +34 more |
| CVE-2025-20311 | 7.4 | Sep 24 | A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an… Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.5; +34 more |
| CVE-2025-20140 | 7.4 | May 7 | A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent wireless… Affected: 16.4.1; 16.4.2; 16.4.3; 16.5.1; 16.5.1a; 16.5.1b; +34 more |
| CVE-2025-20189 | 7.4 | May 7 | A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could… Affected: 3.16.0cs; 3.16.0s; 3.16.1as; 3.16.1s; 3.16.2as; 3.16.2bs; +34 more |
| CVE-2025-20202 | 7.4 | May 7 | A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device Affected: 16.10.1; 16.10.1a; 16.10.1b; 16.10.1c; 16.10.1d; 16.10.1e; +34 more |
| CVE-2024-20313 | 7.4 | Apr 24 | A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload… Affected: 17.5.1; 17.5.1a; 17.6.1; 17.6.1a; 17.6.1w; 17.6.1x; +32 more |
| CVE-2024-20303 | 7.4 | Mar 27 | A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause… Affected: 17.2.1; 17.2.1a; 17.2.1r; 17.2.1v; 17.2.2; 17.2.3; +34 more |
| CVE-2024-20312 | 7.4 | Mar 27 | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0xo; +34 more |
| CVE-2024-20354 | 7.4 | Mar 27 | A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of… Affected: 16.12.4a before 17.1.0; 17.3.0 before 17.3.9; 17.4.0 before 17.6.7; 17.7.0 before 17.9.5; 17.10.0 before 17.12.2 |
| CVE-2022-20915 | 7.4 | Oct 10 | Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2021-34767 | 7.4 | Sep 23 | A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated,… Affected: 3.15.1xbs; 3.15.2xbs; 16.7.1; 16.7.1a; 16.7.1b; 16.7.2; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)