Cisco Ios (Cisco) - vulnerabilities (CVEs)

36 CVEs, 0 in the last 30 days, 274 known versions, newest CVE from 2023-03-23. Vendor: Cisco.

CVEs of Cisco Ios

CVE-2023-20081 - CVSS 6.8 (medium), 2023-03-23: A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software,…
CVE-2023-20080 - CVSS 8.6 (high), 2023-03-23: A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker…
CVE-2023-20076 - CVSS 8.8 (high), 2023-02-12: A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the…
CVE-2022-20920 - CVSS 7.7 (high), 2022-10-10: A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected…
CVE-2022-20919 - CVSS 8.6 (high), 2022-09-30: A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Software and Cisco IOS XE Software could…
CVE-2022-20720 - CVSS 7.2 (high), 2022-04-15: Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands…
CVE-2022-20723 - CVSS 7.2 (high), 2022-04-15: Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands…
CVE-2022-20726 - CVSS 7.5 (high), 2022-04-15: Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands…
CVE-2022-20719 - CVSS 7.2 (high), 2022-04-15: Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands…
CVE-2022-20722 - CVSS 5.5 (medium), 2022-04-15: Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands…
CVE-2022-20725 - CVSS 5.5 (medium), 2022-04-15: Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands…
CVE-2022-20761 - CVSS 7.4 (high), 2022-04-15: A vulnerability in the integrated wireless access point (AP) packet processing of the Cisco 1000 Series Connected Grid Router (CGR1K) could allow an…
CVE-2022-20718 - CVSS 7.2 (high), 2022-04-15: Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands…
CVE-2022-20721 - CVSS 5.5 (medium), 2022-04-15: Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands…
CVE-2022-20724 - CVSS 5.5 (medium), 2022-04-15: Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands…
CVE-2022-20727 - CVSS 6.7 (medium), 2022-04-15: Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands…
CVE-2022-20697 - CVSS 8.6 (high), 2022-04-15: A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial…
CVE-2022-20677 - CVSS 6.7 (medium), 2022-04-15: Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands…
CVE-2021-34714 - CVSS 7.4 (high), 2021-09-23: A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software,…
CVE-2021-34705 - CVSS 5.3 (medium), 2021-09-23: A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote…
CVE-2021-34703 - CVSS 6.8 (medium), 2021-09-23: A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger…
CVE-2021-34699 - CVSS 7.7 (high), 2021-09-23: A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to…
CVE-2021-1620 - CVSS 7.7 (high), 2021-09-23: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could…
CVE-2021-1460 - CVSS 7.5 (high), 2021-03-24: A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers (Industrial ISRs), Cisco 829 Industrial ISRs, Cisco…
CVE-2021-1392 - CVSS 7.8 (high), 2021-03-24: A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password…
CVE-2021-1385 - CVSS 6.5 (medium), 2021-03-24: A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct…
CVE-2021-1377 - CVSS 5.8 (medium), 2021-03-24: A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote…
CVE-2021-1391 - CVSS 6.7 (medium), 2021-03-24: A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root…
CVE-2020-3511 - CVSS 7.4 (high), 2020-09-24: A vulnerability in the ISDN subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of…
CVE-2020-3512 - CVSS 7.4 (high), 2020-09-24: A vulnerability in the PROFINET handler for Link Layer Discovery Protocol (LLDP) messages of Cisco IOS Software and Cisco IOS XE Software could allow an…
CVE-2020-3477 - CVSS 5.5 (medium), 2020-09-24: A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash:…
CVE-2020-3408 - CVSS 8.6 (high), 2020-09-24: A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected…
CVE-2020-3409 - CVSS 7.4 (high), 2020-09-24: A vulnerability in the PROFINET feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected…
CVE-2019-12647 - CVSS 8.6 (high), 2019-09-25: A vulnerability in the Ident protocol handler of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to…
CVE-2018-0484 - CVSS 6.5 (medium), 2019-01-10: A vulnerability in the access control logic of the Secure Shell (SSH) server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual…
CVE-2018-0282 - CVSS 6.8 (medium), 2019-01-10: A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload.…
CVE-2015-4204 - CVSS 6.8 (medium), 2015-06-23: Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000 devices allows remote authenticated users to cause a denial of…
CVE-2009-0634 - CVSS 7.1 (high), 2009-03-27: Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco…
CVE-2009-0633 - CVSS 7.1 (high), 2009-03-27: Multiple unspecified vulnerabilities in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote…
CVE-2009-0628 - CVSS 9 (critical), 2009-03-27: Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by…
CVE-2008-1152 - CVSS 7.8 (high), 2008-03-27: The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device restart or memory…
CVE-2008-1156 - CVSS 5.1 (medium), 2008-03-27: Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to…
CVE-2008-1153 - CVSS 7.1 (high), 2008-03-27: Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol enabled, allows remote attackers to cause a denial of service (device crash…