[ Vendor · 178 CVEs ]
Cisco
CVEs affecting Cisco published in the last 30 days, plus any Cisco CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2024-20353 | 24 Apr 2024 | CVSS 8.6 | Cisco ASA and FTD Denial of ServiceA vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)… | Exploited |
| CVE-2024-20359 | 24 Apr 2024 | CVSS 6.0 | Cisco ASA and FTD Privilege EscalationA vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive… | Exploited |
| CVE-2024-20359 | 24 Apr 2024 | CVSS 6.0 | Cisco ASA and FTD Privilege EscalationA vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive… | Exploited |
| CVE-2023-20273 | 25 Oct 2023 | CVSS 7.2 | Cisco IOS XE Web UI Command InjectionA vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges… | Exploited |
| CVE-2023-20198 | 16 Oct 2023 | CVSS 10.0 | Cisco IOS XE Web UI Privilege EscalationCisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating… | Exploited |
| CVE-2023-20109 | 27 Sep 2023 | CVSS 6.6 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds WriteA vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an… | Exploited |
| CVE-2023-20269 | 6 Sep 2023 | CVSS 9.1 | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized AccessA vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)… | Exploited |
| CVE-2023-20118 | 13 Apr 2023 | CVSS 7.2 | Cisco Small Business RV Series Routers Command InjectionA vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could… | Exploited |
| CVE-2022-20775 | 30 Sep 2022 | CVSS 7.8 | Cisco SD-WAN Path TraversalA vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is… | Exploited |
| CVE-2022-20821 | 26 May 2022 | CVSS 6.5 | Cisco IOS XR Open PortA vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is… | Exploited |
| CVE-2022-20700 | 10 Feb 2022 | CVSS 9.8 | Cisco Small Business RV Series Routers Stack-based Buffer OverflowMultiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following… | Exploited |
| CVE-2022-20701 | 10 Feb 2022 | CVSS 7.8 | Cisco Small Business RV Series Routers Stack-based Buffer OverflowMultiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following… | Exploited |
| CVE-2022-20703 | 10 Feb 2022 | CVSS 8.0 | Cisco Small Business RV Series Routers Stack-based Buffer OverflowMultiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following… | Exploited |
| CVE-2022-20708 | 10 Feb 2022 | CVSS 8.0 | Cisco Small Business RV Series Routers Stack-based Buffer OverflowMultiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following… | Exploited |
| CVE-2022-20699 | 10 Feb 2022 | CVSS 9.8 | Cisco Small Business RV Series Routers Stack-based Buffer OverflowMultiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following… | Exploited |
| CVE-2021-1497 | 6 May 2021 | CVSS 9.8 | Cisco HyperFlex HX Installer Virtual Machine Command InjectionMultiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform… | Exploited |
| CVE-2021-1498 | 6 May 2021 | CVSS 9.8 | Cisco HyperFlex HX Data Platform Command InjectionMultiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform… | Exploited |
| CVE-2020-3580 | 21 Oct 2020 | CVSS 6.1 | Cisco ASA and FTD Cross-Site Scripting (XSS)Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)… | ExploitedFix |
| CVE-2020-3569 | 23 Sep 2020 | CVSS 8.6 | Cisco IOS XR Software DVMRP Memory ExhaustionMultiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated… | Exploited |
| CVE-2020-3566 | 29 Aug 2020 | CVSS 8.6 | Cisco IOS XR Software DVMRP Memory ExhaustionA vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote… | Exploited |
| CVE-2020-3433 | 17 Aug 2020 | CVSS 7.8 | Cisco AnyConnect Secure Mobility Client for Windows DLL HijackingA vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated… | Exploited |
| CVE-2020-3452 | 22 Jul 2020 | CVSS 7.5 | Cisco ASA and FTD Read-Only Path TraversalA vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… | Exploited |
| CVE-2020-3259 | 6 May 2020 | CVSS 7.5 | Cisco ASA and FTD Information DisclosureA vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… | Exploited |
| CVE-2020-3259 | 6 May 2020 | CVSS 7.5 | Cisco ASA and FTD Information DisclosureA vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… | Exploited |
| CVE-2020-3161 | 15 Apr 2020 | CVSS 9.8 | Cisco IP Phones Web Server Remote Code Execution and Denial-of-ServiceA vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a… | Exploited |
| CVE-2020-3153 | 19 Feb 2020 | CVSS 6.5 | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search PathA vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy… | Exploited |
| CVE-2020-3118 | 5 Feb 2020 | CVSS 8.8 | Cisco IOS XR Software Discovery Protocol Format StringA vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute… | Exploited |
| CVE-2019-15271 | 26 Nov 2019 | CVSS 8.8 | Cisco RV Series Routers Deserialization of Untrusted DataA vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker… | Exploited |
| CVE-2019-1653 | 24 Jan 2019 | CVSS 7.5 | Cisco Small Business RV320 and RV325 Routers Information DisclosureA vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an… | Exploited |
| CVE-2019-1652 | 24 Jan 2019 | CVSS 7.2 | Cisco Small Business Routers Improper Input ValidationA vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an… | Exploited |
| CVE-2018-0296 | 7 Jun 2018 | CVSS 7.5 | Cisco Adaptive Security Appliance (ASA) Denial-of-ServiceA vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an… | Exploited |
| CVE-2018-0171 | 28 Mar 2018 | CVSS 9.8 | Cisco IOS and IOS XE Software Smart Install Remote Code ExecutionA vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… | Exploited |
| CVE-2018-0172 | 28 Mar 2018 | CVSS 8.6 | Cisco IOS and IOS XE Software Improper Input ValidationA vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated… | Exploited |
| CVE-2018-0173 | 28 Mar 2018 | CVSS 8.6 | Cisco IOS and IOS XE Software Improper Input ValidationA vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4… | Exploited |
| CVE-2018-0174 | 28 Mar 2018 | CVSS 8.6 | Cisco IOS Software and Cisco IOS XE Software Improper Input ValidationA vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated… | Exploited |
| CVE-2018-0175 | 28 Mar 2018 | CVSS 8.0 | Cisco IOS, XR, and XE Software Buffer OverflowFormat String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR… | Exploited |
| CVE-2018-0179 | 28 Mar 2018 | CVSS 5.9 | Cisco IOS Software Denial-of-ServiceMultiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to… | Exploited |
| CVE-2018-0180 | 28 Mar 2018 | CVSS 5.9 | Cisco IOS Software Denial-of-ServiceMultiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to… | Exploited |
| CVE-2018-0151 | 28 Mar 2018 | CVSS 9.8 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code ExecutionA vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote… | Exploited |
| CVE-2018-0154 | 28 Mar 2018 | CVSS 7.5 | Cisco IOS Software Integrated Services Module for VPN Denial-of-ServiceA vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an… | Exploited |
| CVE-2018-0155 | 28 Mar 2018 | CVSS 8.6 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-ServiceA vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst… | Exploited |
| CVE-2018-0156 | 28 Mar 2018 | CVSS 7.5 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-ServiceA vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… | Exploited |
| CVE-2018-0158 | 28 Mar 2018 | CVSS 8.6 | Cisco IOS and XE Software Internet Key Exchange Memory LeakA vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated… | Exploited |
| CVE-2018-0159 | 28 Mar 2018 | CVSS 7.5 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-ServiceA vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could… | Exploited |
| CVE-2018-0161 | 28 Mar 2018 | CVSS 6.3 | Cisco IOS Software Resource Management ErrorsA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches… | Exploited |
| CVE-2018-0167 | 28 Mar 2018 | CVSS 8.8 | Cisco IOS, XR, and XE Software Buffer OverflowMultiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and… | Exploited |
| CVE-2017-12319 | 27 Mar 2018 | CVSS 5.9 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-ServiceA vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an… | Exploited |
| CVE-2018-0147 | 8 Mar 2018 | CVSS 9.8 | Cisco Secure Access Control System Java DeserializationA vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated… | Exploited |
| CVE-2018-0125 | 8 Feb 2018 | CVSS 9.8 | Cisco VPN Routers Remote Code ExecutionA vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an… | Exploited |
| CVE-2017-12240 | 29 Sep 2017 | CVSS 9.8 | Cisco IOS and IOS XE Software DHCP Remote Code ExecutionThe DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated… | Exploited |
| CVE-2017-12231 | 29 Sep 2017 | CVSS 7.5 | Cisco IOS Software Network Address Translation Denial-of-ServiceA vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an… | Exploited |
| CVE-2017-12232 | 29 Sep 2017 | CVSS 6.5 | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-ServiceA vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through… | Exploited |
| CVE-2017-12233 | 29 Sep 2017 | CVSS 7.5 | Cisco IOS Software Common Industrial Protocol Request Denial-of-ServiceMultiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an… | Exploited |
| CVE-2017-12234 | 29 Sep 2017 | CVSS 7.5 | Cisco IOS Software Common Industrial Protocol Request Denial-of-ServiceMultiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an… | Exploited |
| CVE-2017-12235 | 29 Sep 2017 | CVSS 7.5 | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-ServiceA vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an… | Exploited |
| CVE-2017-12237 | 29 Sep 2017 | CVSS 7.5 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-ServiceA vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an… | Exploited |
| CVE-2017-12238 | 29 Sep 2017 | CVSS 6.5 | Cisco Catalyst 6800 Series Switches VPLS Denial-of-ServiceA vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an… | Exploited |
| CVE-2017-6627 | 7 Sep 2017 | CVSS 7.5 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-ServiceA vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote… | Exploited |
| CVE-2017-6663 | 7 Aug 2017 | CVSS 6.5 | Cisco IOS Software and Cisco IOS XE Software Denial-of-ServiceA vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker… | Exploited |
| CVE-2017-6736 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an… | Exploited |
| CVE-2017-6737 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionA vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely… | Exploited |
| CVE-2017-6738 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an… | Exploited |
| CVE-2017-6739 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionA vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely… | Exploited |
| CVE-2017-6740 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an… | Exploited |
| CVE-2017-6742 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionA vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely… | Exploited |
| CVE-2017-6743 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS and IOS XE Software SNMP Remote Code ExecutionThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an… | Exploited |
| CVE-2017-6744 | 17 Jul 2017 | CVSS 8.8 | Cisco IOS Software SNMP Remote Code ExecutionThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an… | Exploited |
| CVE-2017-3881 | 17 Mar 2017 | CVSS 9.8 | Cisco IOS and IOS XE Remote Code ExecutionA vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated… | Exploited |
| CVE-2016-6415 | 19 Sep 2016 | CVSS 7.5 | Cisco IOS, IOS XR, and IOS XE IKEv1 Information DisclosureThe server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and… | Exploited |
| CVE-2016-6367 | 18 Aug 2016 | CVSS 7.8 | Cisco Adaptive Security Appliance (ASA) CLI Remote Code ExecutionCisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges… | Exploited |
| CVE-2016-6366 | 18 Aug 2016 | CVSS 8.8 | Cisco Adaptive Security Appliance (ASA) SNMP Buffer OverflowBuffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv… | Exploited |
| CVE-2015-0666 | 3 Apr 2015 | CVSS 7.5 | Cisco Prime Data Center Network Manager (DCNM) Directory TraversalDirectory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to… | Exploited |
| CVE-2014-2120 | 19 Mar 2014 | CVSS 6.1 | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS)Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to… | Exploited |
| CVE-2014-2120 | 19 Mar 2014 | CVSS 6.1 | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS)Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to… | Exploited |
| CVE-2010-3035 | 30 Aug 2010 | CVSS 7.5 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-ServiceCisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to… | Exploited |
| CVE-2009-2055 | 19 Aug 2009 | CVSS 5.9 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-ServiceCisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid… | ExploitedFix |
| CVE-2008-4128 | 18 Sep 2008 | CVSS 8.1 | Cisco IOS Cross-Site Request ForgeryMultiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services… | Exploited |
| CVE-2004-1464 | 31 Dec 2004 | CVSS 5.9 | Cisco IOS Denial-of-ServiceCisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP… | ExploitedFix |
Page 2 of 2