Advisories · Technology

Cisco IOS and IOS XE.

Every CVE that names Cisco IOS and IOS XE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2018-0189 CVE record

A vulnerability in the Forwarding Information Base (FIB) code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, network attacker to cause a denial of service (DoS) condi…
- Cisco IOS and IOS XE
- CWE-399
Not analysed yet 28 Mar 2018
CVE-2018-0174 CVE record

CVSS 8.6 HighCritical · KEVKEV

Improper input validation in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- CWE-20
Not analysed yet 28 Mar 2018
CVE-2018-0173 CVE record

CVSS 8.6 HighCritical · KEVKEV

Improper input validation in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- CWE-20
Not analysed yet 28 Mar 2018
CVE-2018-0172 CVE record

CVSS 8.6 HighCritical · KEVKEV

Improper input validation in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- CWE-20
Not analysed yet 28 Mar 2018
CVE-2018-0171 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV

Improper input validation in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- CWE-20
Not analysed yet 28 Mar 2018
CVE-2018-0159 CVE record

CVSS 7.5 HighCritical · KEVKEV

Improper input validation in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- CWE-20
Not analysed yet 28 Mar 2018
CVE-2018-0158 CVE record

CVSS 8.6 HighCritical · KEVKEV

Improper input validation in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- CWE-20
Not analysed yet 28 Mar 2018
CVE-2018-0156 CVE record

CVSS 7.5 HighCritical · KEVKEV

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a…
- Cisco IOS and IOS XE
- CWE-399
Not analysed yet 28 Mar 2018
CVE-2018-0155 CVE record

CVSS 8.6 HighCritical · KEVKEV

A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated,…
- Cisco IOS and IOS XE
- CWE-388
Not analysed yet 28 Mar 2018
CVE-2018-0151 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Buffer overflow in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- Memory corruption
Not analysed yet 28 Mar 2018
CVE-2018-0123 CVE record

Path traversal in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- Path traversal
Not analysed yet 8 Feb 2018
CVE-2017-12304 CVE record

Cross-site scripting in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- Cross-site scripting (XSS)
Not analysed yet 16 Nov 2017
CVE-2017-12240 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Improper input validation in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- CWE-20
Not analysed yet 28 Sept 2017
CVE-2017-12237 CVE record

CVSS 7.5 HighCritical · KEVKEV

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CP…
- Cisco IOS and IOS XE
- CWE-399
Not analysed yet 28 Sept 2017
CVE-2017-12228 CVE record

Improper input validation in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- CWE-20
Not analysed yet 28 Sept 2017
CVE-2017-6665 CVE record

A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane (ACP) of an…
- Cisco IOS and IOS XE
Not analysed yet 7 Aug 2017
CVE-2017-6663 CVE record

CVSS 6.5 MediumCritical · KEVKEV

A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to…
- Cisco IOS and IOS XE
Not analysed yet 7 Aug 2017
CVE-2017-3863 CVE record

Buffer overflow in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- Memory corruption
Not analysed yet 20 Apr 2017
CVE-2017-3862 CVE record

Buffer overflow in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- Memory corruption
Not analysed yet 20 Apr 2017
CVE-2017-3861 CVE record

Buffer overflow in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- Memory corruption
Not analysed yet 20 Apr 2017
CVE-2017-3860 CVE record

Buffer overflow in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- Memory corruption
Not analysed yet 20 Apr 2017
CVE-2017-3864 CVE record

A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenticated, remote attacker to cause a denial…
- Cisco IOS and IOS XE
- CWE-399
Not analysed yet 22 Mar 2017
CVE-2017-3857 CVE record

A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an unauthenticated, re…
- Cisco IOS and IOS XE
- CWE-399
Not analysed yet 22 Mar 2017
CVE-2017-3850 CVE record

Improper input validation in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- CWE-20
Not analysed yet 21 Mar 2017
CVE-2017-3849 CVE record

Improper input validation in Cisco IOS and IOS XE
- Cisco IOS and IOS XE
- CWE-20
Not analysed yet 21 Mar 2017