Advisories · Technology

Cisco IOS XE Software.

Every CVE that names Cisco IOS XE Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-20169 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 5 Feb 2025
CVE-2025-20175 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 5 Feb 2025
CVE-2025-20174 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 5 Feb 2025
CVE-2025-20170 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 5 Feb 2025
CVE-2025-20171 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- CWE-248
Not analysed yet 5 Feb 2025
CVE-2025-20176 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- CWE-248
Not analysed yet 5 Feb 2025
CVE-2025-20172 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XR Software
- CWE-248
Not analysed yet 5 Feb 2025
CVE-2025-20173 CVE record

CVSS 7.7 High

Cisco IOS: A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software…
- Cisco IOS
- Cisco IOS XE Software
- CWE-248
Not analysed yet 5 Feb 2025
CVE-2024-20434 CVE record

CVSS 4.3 Medium

Integer overflow in Cisco IOS XE Software
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 25 Sept 2024
CVE-2024-20414 CVE record

CVSS 6.5 Medium

Improper authorization in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Broken access control
Not analysed yet 25 Sept 2024
CVE-2024-20510 CVE record

CVSS 4.7 Medium

Incorrect authorization in Cisco IOS XE Software
- Cisco IOS XE Software
- Broken access control
Not analysed yet 25 Sept 2024
CVE-2024-20467 CVE record

CVSS 8.6 High

Cisco IOS XE Software: A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco…
- Cisco IOS XE Software
- CWE-399
Not analysed yet 25 Sept 2024
CVE-2024-20464 CVE record

CVSS 8.6 High

Improper input validation in Cisco IOS XE Software
- Cisco IOS XE Software
- CWE-20
Not analysed yet 25 Sept 2024
CVE-2024-20480 CVE record

CVSS 8.6 High

Cisco IOS XE Software: A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined…
- Cisco IOS XE Software
- CWE-783
Not analysed yet 25 Sept 2024
CVE-2024-20437 CVE record

CVSS 8.1 High

Cross-site request forgery in Cisco IOS XE Software
- Cisco IOS XE Software
- Cross-site request forgery (CSRF)
Not analysed yet 25 Sept 2024
CVE-2024-20436 CVE record

CVSS 8.6 High

NULL pointer dereference in Cisco IOS XE Software
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 25 Sept 2024
CVE-2024-20433 CVE record

CVSS 8.6 High

Stack-based buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 25 Sept 2024
CVE-2024-20455 CVE record

CVSS 8.6 High

Cisco IOS XE Software: A vulnerability in the process that classifies traffic that is going to the Unified…
- Cisco IOS XE Software
- Cisco IOS XE Catalyst SD-WAN
- CWE-371
Not analysed yet 25 Sept 2024
CVE-2024-20313 CVE record

CVSS 7.4 High

Buffer overflow in Cisco IOS XE Software
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 24 Apr 2024
CVE-2024-20310 CVE record

CVSS 6.1 Medium

Path traversal in Cisco IOS XE Software and others
- Cisco IOS XE Software
- Cisco Unified Communications Manager IM and Presence Service
- Path traversal
Not analysed yet 3 Apr 2024
CVE-2024-20307 CVE record

CVSS 6.8 Medium

Stack-based buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 27 Mar 2024
CVE-2024-20308 CVE record

CVSS 8.6 High

Out-of-bounds write in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 27 Mar 2024
CVE-2024-20265 CVE record

CVSS 5.9 Medium

A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that…
- Cisco IOS XE Software
- Cisco Aironet Access Point Software
- CWE-501
Not analysed yet 27 Mar 2024
CVE-2024-20309 CVE record

CVSS 5.6 Medium

Cisco IOS XE Software: A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software…
- Cisco IOS XE Software
- CWE-828
Not analysed yet 27 Mar 2024
CVE-2024-20303 CVE record

CVSS 7.4 High

Incomplete cleanup in Cisco IOS XE Software
- Cisco IOS XE Software
- CWE-459
Not analysed yet 27 Mar 2024
CVE-2024-20278 CVE record

CVSS 6.5 Medium

Cisco IOS XE Software: A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an…
- Cisco IOS XE Software
- CWE-184
Not analysed yet 27 Mar 2024
CVE-2024-20306 CVE record

CVSS 6.0 Medium

Cisco IOS XE Software: A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE…
- Cisco IOS XE Software
- CWE-233
Not analysed yet 27 Mar 2024
CVE-2024-20314 CVE record

CVSS 8.6 High

Cisco IOS XE Software: A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature…
- Cisco IOS XE Software
- CWE-783
Not analysed yet 27 Mar 2024
CVE-2024-20312 CVE record

CVSS 7.4 High

NULL pointer dereference in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 27 Mar 2024
CVE-2024-20324 CVE record

CVSS 5.5 Medium

Cisco IOS XE Software: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated…
- Cisco IOS XE Software
- CWE-274
Not analysed yet 27 Mar 2024
CVE-2024-20259 CVE record

CVSS 8.6 High

Heap-based buffer overflow in Cisco IOS XE Software
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 27 Mar 2024
CVE-2024-20311 CVE record

CVSS 8.6 High

Uncontrolled recursion in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Denial of service
Not analysed yet 27 Mar 2024
CVE-2024-20316 CVE record

CVSS 5.8 Medium

Cisco IOS XE Software: A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could…
- Cisco IOS XE Software
- CWE-390
Not analysed yet 27 Mar 2024
CVE-2023-20273 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

OS command injection in Cisco IOS XE Software
- Cisco IOS XE Software
- Command injection
Not analysed yet 24 Oct 2023
CVE-2023-20198 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Cisco IOS XE Software: Cisco is providing an update for the ongoing investigation into observed exploitation of…
- Cisco IOS XE Software
- CWE-420
Not analysed yet 16 Oct 2023
CVE-2023-20235 CVE record

CVSS 6.5 Medium

Files accessible to external parties in Cisco IOS XE Software
- Cisco IOS XE Software
- Information disclosure
Not analysed yet 4 Oct 2023
CVE-2023-20202 CVE record

CVSS 6.1 Medium

Cisco IOS XE Software: A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software…
- Cisco IOS XE Software
- Denial of service
Not analysed yet 27 Sept 2023
CVE-2023-20109 CVE record

CVSS 6.6 MediumCritical · KEVKEV

Out-of-bounds write in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 27 Sept 2023
CVE-2023-20186 CVE record

CVSS 8.0 High

Improper authorization in Cisco IOS and others
- Cisco IOS
- Cisco IOS XE Software
- Broken access control
Not analysed yet 27 Sept 2023
CVE-2023-20227 CVE record

CVSS 8.6 High

Cisco IOS XE Software: A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software…
- Cisco IOS XE Software
- CWE-388
Not analysed yet 27 Sept 2023
CVE-2023-20226 CVE record

CVSS 8.6 High

Cisco IOS XE Software: A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense…
- Cisco IOS XE Software
- CWE-456
Not analysed yet 27 Sept 2023
CVE-2023-20033 CVE record

CVSS 8.6 High

Resource allocation without limits in Cisco IOS XE Software
- Cisco IOS XE Software
- Denial of service
Not analysed yet 27 Sept 2023
CVE-2023-20187 CVE record

CVSS 8.6 High

Cisco IOS XE Software: A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE…
- Cisco IOS XE Software
- CWE-823
Not analysed yet 27 Sept 2023
CVE-2023-20231 CVE record

CVSS 8.8 High

OS command injection in Cisco IOS XE Software
- Cisco IOS XE Software
- Command injection
Not analysed yet 27 Sept 2023
CVE-2023-20100 CVE record

CVSS 6.8 Medium

Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-694
Not analysed yet 23 Mar 2023
CVE-2023-20072 CVE record

CVSS 8.6 High

Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 23 Mar 2023
CVE-2023-20067 CVE record

CVSS 7.4 High

Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability
- Cisco IOS XE Software
- Denial of service
Not analysed yet 23 Mar 2023
CVE-2023-20066 CVE record

CVSS 6.5 Medium

Cisco IOS XE Software Web UI Path Traversal Vulnerability
- Cisco IOS XE Software
- Path traversal
Not analysed yet 23 Mar 2023
CVE-2023-20065 CVE record

CVSS 7.8 High

Improper access control in Cisco IOS XE Software
- Cisco IOS XE Software
- Broken access control
Not analysed yet 23 Mar 2023
CVE-2023-20035 CVE record

CVSS 7.8 High

Cisco IOS XE SD-WAN Software Command Injection Vulnerability
- Cisco IOS XE Software
- CWE-146
Not analysed yet 23 Mar 2023
CVE-2023-20029 CVE record

CVSS 4.4 Medium

Cisco IOS XE Software Privilege Escalation Vulnerability
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 23 Mar 2023
CVE-2023-20027 CVE record

CVSS 8.6 High

Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 23 Mar 2023
CVE-2022-20864 CVE record

CVSS 4.6 Medium

Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability
- Cisco IOS XE Software
- Information disclosure
Not analysed yet 10 Oct 2022
CVE-2022-20837 CVE record

CVSS 8.6 High

Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-754
Not analysed yet 10 Oct 2022
CVE-2022-20915 CVE record

CVSS 7.4 High

Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-115
Not analysed yet 10 Oct 2022
CVE-2022-20870 CVE record

CVSS 8.6 High

Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-130
Not analysed yet 10 Oct 2022
CVE-2022-20944 CVE record

CVSS 6.1 Medium

Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability
- Cisco IOS XE Software
- Weak cryptography or TLS
Not analysed yet 10 Oct 2022
CVE-2022-20856 CVE record

CVSS 8.6 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-664
Not analysed yet 30 Sept 2022
CVE-2022-20855 CVE record

CVSS 7.9 High

Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability
- Cisco IOS XE Software
- Privilege escalation
Not analysed yet 30 Sept 2022
CVE-2022-20851 CVE record

CVSS 5.5 Medium

Cisco IOS XE Software Web UI Command Injection Vulnerability
- Cisco IOS XE Software
- Command injection
Not analysed yet 30 Sept 2022