IX
Network Security
IOS XE
On CISA KEVExploited in the wild
561
CVEs
27
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 20High 266Medium 158Low 1
Watch
Add IOS XE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6379 | 7.5 | Oct 5 | Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record (IPDR) packets, aka Bug ID… Affected: 3.14.0s; 3.14.1s; 3.14.2s; 3.14.3s; 3.14.4s; 3.15.0s; +10 more |
| CVE-2016-6378 | 7.5 | Oct 5 | Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets that require NAT, aka Bug ID… Affected: 3.1.3s; 3.1.4as; 3.1.4s; 3.2.1s; 3.2.2s; 3.3.0s; +34 more |
| CVE-2016-6392 | 7.5 | Oct 5 | Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service (device restart) via a crafted IPv4 Multicast Source Discovery… Affected: 3.1.0s; 3.1.1s; 3.1.2s; 3.1.3as; 3.1.4as; 3.1.4s; +34 more |
| CVE-2016-6386 | 7.5 | Oct 5 | Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4… Affected: 3.1.0s; 3.1.0sg; 3.1.1s; 3.1.1sg; 3.1.2s; 3.1.3as; +34 more |
| CVE-2016-6384 | 7.5 | Oct 5 | Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service (device reload) via crafted fields in an… Affected: 3.1 through 3.17; 16.2 |
| CVE-2016-6382 | 7.5 | Oct 5 | Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Protocol Independent… Affected: 3.6.0e; 3.6.1e; 3.6.2ae; 3.6.2e; 3.6.3e; 3.6.4e; +34 more |
| CVE-2016-6381 | 7.5 | Oct 5 | Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented… Affected: 3.1.0s; 3.1.1s; 3.1.2s; 3.1.3as; 3.1.4as; 3.1.4s; +34 more |
| CVE-2016-1409 | 7.5 | May 29 | The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a… Affected: 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1; +34 more |
| CVE-2015-6360 | 7.5 | Apr 21 | The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686 Affected: 3.10s_3.10.0s; 3.10s_3.10.1s; 3.10s_3.10.1xbs; 3.10s_3.10.2s; 3.10s_3.10.2ts; 3.10s_3.10.4s; +14 more |
| CVE-2016-1384 | 7.5 | Apr 20 | The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898 Affected: 3.2.0ja; 3.2.0s; 3.2.0se; 3.2.0sg; 3.2.0xo; 3.2.1s; +34 more |
| CVE-2016-1350 | 7.5 | Mar 26 | Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed… Affected: 3.8.0s; 3.8.1s; 3.8.2s; 3.9.0as; 3.9.0s; 3.9.1as; +7 more |
| CVE-2016-1349 | 7.5 | Mar 26 | The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via… Affected: 3.2ja_3.2.0ja; 3.2se_3.2.0se; 3.2se_3.2.1se; 3.2se_3.2.2se; 3.2se_3.2.3se; 3.3se_3.3.0se; +26 more |
| CVE-2016-1348 | 7.5 | Mar 26 | Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Relay message, aka Bug ID… Affected: 3.3xo_3.3.0xo; 3.3xo_3.3.1xo; 3.3xo_3.3.2xo; 3.5e_3.5.0e; 3.5e_3.5.1e; 3.5e_3.5.2e; +34 more |
| CVE-2012-0382 | 7.5 | Mar 29 | The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS… Affected: 2.1.0 through 2.6.2; 3.1.0s before 3.4.1s; 3.1.0sg before 3.2.2sg |
| CVE-2012-0381 | 7.5 | Mar 29 | The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and… Affected: 2.1.0 through 2.6.2; 3.1.0s before 3.4.1s; 3.1.0sg before 3.2.2sg |
| CVE-2011-3280 | 7.5 | Oct 3 | Memory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (memory… Affected: 3.1.0sg; 3.1.1sg |
| CVE-2026-20004 | 7.4 | Mar 25 | A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device Affected: 16.9.1; 16.9.1a; 16.9.1b; 16.9.1s; 16.9.2; 16.9.3; +34 more |
| CVE-2025-20311 | 7.4 | Sep 24 | A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an… Affected: 16.6.1; 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.5; +34 more |
| CVE-2025-20140 | 7.4 | May 7 | A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent wireless… Affected: 16.4.1; 16.4.2; 16.4.3; 16.5.1; 16.5.1a; 16.5.1b; +34 more |
| CVE-2025-20189 | 7.4 | May 7 | A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could… Affected: 3.16.0cs; 3.16.0s; 3.16.1as; 3.16.1s; 3.16.2as; 3.16.2bs; +34 more |
| CVE-2025-20202 | 7.4 | May 7 | A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device Affected: 16.10.1; 16.10.1a; 16.10.1b; 16.10.1c; 16.10.1d; 16.10.1e; +34 more |
| CVE-2024-20313 | 7.4 | Apr 24 | A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload… Affected: 17.5.1; 17.5.1a; 17.6.1; 17.6.1a; 17.6.1w; 17.6.1x; +32 more |
| CVE-2024-20303 | 7.4 | Mar 27 | A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause… Affected: 17.2.1; 17.2.1a; 17.2.1r; 17.2.1v; 17.2.2; 17.2.3; +34 more |
| CVE-2024-20312 | 7.4 | Mar 27 | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent… Affected: 3.2.0se; 3.2.1se; 3.2.2se; 3.2.3se; 3.3.0se; 3.3.0xo; +34 more |
| CVE-2024-20354 | 7.4 | Mar 27 | A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of… Affected: 16.12.4a before 17.1.0; 17.3.0 before 17.3.9; 17.4.0 before 17.6.7; 17.7.0 before 17.9.5; 17.10.0 before 17.12.2 |
| CVE-2022-20915 | 7.4 | Oct 10 | Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability Affected: All versions, or not specified |
| CVE-2021-34767 | 7.4 | Sep 23 | A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated,… Affected: 3.15.1xbs; 3.15.2xbs; 16.7.1; 16.7.1a; 16.7.1b; 16.7.2; +34 more |
| CVE-2021-34714 | 7.4 | Sep 23 | A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS… Affected: through 8.4\(3.115\); through 7.0\(3\)i7\(9\); through 7.3\(8\)n1\(1\); through 3.2\(3o\)a; through 4.1\(1a\)a |
| CVE-2021-1621 | 7.4 | Sep 23 | A vulnerability in the Layer 2 punt code of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a queue wedge on an interface that receives specific… Affected: before 17.3.1; before 17.3.1; before 17.3.1; before 17.3.1; before 17.3.1 |
| CVE-2021-1403 | 7.4 | Mar 24 | A vulnerability in the web UI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site WebSocket hijacking (CSWSH) attack and cause… Affected: 3.15.1xbs; 3.15.2xbs; 16.3.1; 16.3.1a; 16.3.2; 16.3.3; +34 more |
| CVE-2020-3512 | 7.4 | Sep 24 | A vulnerability in the PROFINET handler for Link Layer Discovery Protocol (LLDP) messages of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent… Affected: 15.2(7)e |
| CVE-2020-3511 | 7.4 | Sep 24 | A vulnerability in the ISDN subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device,… Affected: 15.1(4)m |
| CVE-2020-3508 | 7.4 | Sep 24 | A vulnerability in the IP Address Resolution Protocol (ARP) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded… Affected: 16.3.1; 16.6.5; 16.7(1); 17.1.1; 16.9.1; 17.4.1 |
| CVE-2020-3497 | 7.4 | Sep 24 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless… Affected: 16.12.1 |
| CVE-2020-3494 | 7.4 | Sep 24 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless… Affected: 16.12.1 |
| CVE-2020-3493 | 7.4 | Sep 24 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless… Affected: 16.12.1 |
| CVE-2020-3489 | 7.4 | Sep 24 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless… Affected: 16.12.1 |
| CVE-2020-3488 | 7.4 | Sep 24 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless… Affected: 16.12.1 |
| CVE-2020-3409 | 7.4 | Sep 24 | A vulnerability in the PROFINET feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to crash and… Affected: 15.2(7)e |
| CVE-2020-3390 | 7.4 | Sep 24 | A vulnerability in Simple Network Management Protocol (SNMP) trap generation for wireless clients of the Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000… Affected: 16.12.1 |
| CVE-2019-1750 | 7.4 | Mar 28 | A vulnerability in the Easy Virtual Switching System (VSS) of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the… Affected: 3.6.0ae; 3.6.0be; 3.6.0e; 3.6.1e; 3.6.2ae; 3.6.2e; +34 more |
| CVE-2019-1749 | 7.4 | Mar 28 | A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router (ASR) 900 Route Switch Processor 3 (RSP3) could allow an… Affected: 3.13.6as; 3.16.0as; 3.16.1as; 3.16.2as; 3.16.3as; 3.16.4bs; +34 more |
| CVE-2019-1748 | 7.4 | Mar 28 | A vulnerability in the Cisco Network Plug-and-Play (PnP) agent of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized… Affected: 3.3.0se; 3.3.0xo; 3.3.1se; 3.3.1xo; 3.3.2se; 3.3.2xo; +34 more |
| CVE-2018-15373 | 7.4 | Oct 5 | A vulnerability in the implementation of Cisco Discovery Protocol functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker… Affected: 15.5(3)s3.16 |
| CVE-2018-0475 | 7.4 | Oct 5 | A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial… Affected: 15.0(2.0.0) |
| CVE-2018-0471 | 7.4 | Oct 5 | A vulnerability in the Cisco Discovery Protocol (CDP) module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attacker to cause a… Affected: 16.6.1; 16.6.2 |
| CVE-2018-0165 | 7.4 | Mar 28 | A vulnerability in the Internet Group Management Protocol (IGMP) packet-processing functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to… Affected: 15.2(3)e; denali-16.3.3 |
| CVE-2017-3849 | 7.4 | Mar 21 | A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and Cisco IOS XE Software (possibly 3.7… Affected: 3.7.0e; 3.7.1e; 3.7.2e; 3.7.3e; 3.7.4e; 3.7.5e; +34 more |
| CVE-2021-1432 | 7.3 | Mar 24 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the… Affected: 3.15.1xbs; 3.15.2xbs; 16.12.1; 16.12.1a; 16.12.1c; 16.12.1s; +19 more |
| CVE-2022-20851 | 7.2 | Sep 30 | Cisco IOS XE Software Web UI Command Injection Vulnerability Affected: 17.6.1 |
The 500 most important CVEs for this product (exploited first, then by severity)