Advisories · Technology

Cisco IOS XE Software.

Every CVE that names Cisco IOS XE Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-3359 CVE record

CVSS 8.6 High

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3390 CVE record

CVSS 7.4 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3393 CVE record

CVSS 6.0 Medium

Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability
- Cisco IOS XE Software
- Privilege escalation
Not analysed yet 24 Sept 2020
CVE-2020-3396 CVE record

CVSS 6.8 Medium

Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation Vulnerability
- Cisco IOS XE Software
- Broken access control
Not analysed yet 24 Sept 2020
CVE-2020-3399 CVE record

CVSS 8.6 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-126
Not analysed yet 24 Sept 2020
CVE-2020-3400 CVE record

CVSS 8.8 High

Cisco IOS XE Software Web UI Authorization Bypass Vulnerability
- Cisco IOS XE Software
- Broken access control
Not analysed yet 24 Sept 2020
CVE-2020-3403 CVE record

CVSS 6.7 Medium

Cisco IOS XE Software Command Injection Vulnerability
- Cisco IOS XE Software
- Command injection
Not analysed yet 24 Sept 2020
CVE-2020-3404 CVE record

CVSS 6.7 Medium

Cisco IOS XE Software Consent Token Bypass Vulnerability
- Cisco IOS XE Software
- Broken access control
Not analysed yet 24 Sept 2020
CVE-2020-3407 CVE record

CVSS 8.6 High

Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service Vulnerability
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 24 Sept 2020
CVE-2020-3416 CVE record

CVSS 6.7 Medium

Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities
- Cisco IOS XE Software
- CWE-749
Not analysed yet 24 Sept 2020
CVE-2020-3417 CVE record

CVSS 6.8 Medium

Cisco IOS XE Software Arbitrary Code Execution Vulnerability
- Cisco IOS XE Software
- Command injection
Not analysed yet 24 Sept 2020
CVE-2020-3418 CVE record

CVSS 4.7 Medium

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Improper Access Control Vulnerability
- Cisco IOS XE Software
- Broken access control
Not analysed yet 24 Sept 2020
CVE-2020-3421 CVE record

CVSS 8.6 High

Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities
- Cisco IOS XE Software
- CWE-754
Not analysed yet 24 Sept 2020
CVE-2020-3422 CVE record

CVSS 8.6 High

Cisco IOS XE Software IP Service Level Agreements Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-371
Not analysed yet 24 Sept 2020
CVE-2020-3428 CVE record

CVSS 7.4 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WLAN Local Profiling Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3429 CVE record

CVSS 7.4 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3476 CVE record

CVSS 4.4 Medium

Cisco IOS XE Software Arbitrary File Overwrite Vulnerability
- Cisco IOS XE Software
- Information disclosure
Not analysed yet 24 Sept 2020
CVE-2020-3480 CVE record

CVSS 8.6 High

Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities
- Cisco IOS XE Software
- CWE-754
Not analysed yet 24 Sept 2020
CVE-2020-3486 CVE record

CVSS 7.4 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3487 CVE record

CVSS 7.4 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3488 CVE record

CVSS 7.4 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3489 CVE record

CVSS 7.4 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3493 CVE record

CVSS 7.4 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3494 CVE record

CVSS 7.4 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3497 CVE record

CVSS 7.4 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3503 CVE record

CVSS 6.0 Medium

Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability
- Cisco IOS XE Software
- Broken access control
Not analysed yet 24 Sept 2020
CVE-2020-3508 CVE record

CVSS 7.4 High

Cisco IOS XE Software for Cisco ASR 1000 Series 20-Gbps Embedded Services Processor IP ARP Denial of Service Vulnerability
- Cisco IOS XE Software
- Denial of service
Not analysed yet 24 Sept 2020
CVE-2020-3509 CVE record

CVSS 8.6 High

Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-388
Not analysed yet 24 Sept 2020
CVE-2020-3510 CVE record

CVSS 8.6 High

Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-388
Not analysed yet 24 Sept 2020
CVE-2020-3513 CVE record

CVSS 6.7 Medium

Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities
- Cisco IOS XE Software
- CWE-749
Not analysed yet 24 Sept 2020
CVE-2020-3516 CVE record

CVSS 4.3 Medium

Cisco IOS XE Software Web UI Improper Input Validation Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3526 CVE record

CVSS 8.6 High

Cisco IOS XE Software Common Open Policy Service Engine Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2020-3527 CVE record

CVSS 8.6 High

Cisco Catalyst 9200 Series Switches Jumbo Frame Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Sept 2020
CVE-2019-12664 CVE record

CVSS 4.7 Medium

Cisco IOS XE Software ISDN Data Leak Vulnerability
- Cisco IOS XE Software
- Information disclosure
Not analysed yet 25 Sept 2019
CVE-2019-12663 CVE record

CVSS 6.8 Medium

Cisco IOS XE Software TrustSec Protected Access Credential Provisioning Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 25 Sept 2019
CVE-2019-12661 CVE record

CVSS 6.7 Medium

Cisco IOS XE Software Virtualization Manager CLI Command Injection Vulnerability
- Cisco IOS XE Software
- Command injection
Not analysed yet 25 Sept 2019
CVE-2019-12653 CVE record

CVSS 8.6 High

Cisco IOS XE Software Raw Socket Transport Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 25 Sept 2019
CVE-2019-12646 CVE record

CVSS 8.6 High

Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-399
Not analysed yet 25 Sept 2019
CVE-2019-12643 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Cisco REST API Container for IOS XE Software Authentication Bypass Vulnerability
- Cisco IOS XE Software
- Authentication bypass
Not analysed yet 28 Aug 2019
CVE-2019-12624 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Cisco IOS XE NGWC Legacy Wireless Device Manager GUI Cross-Site Request Forgery Vulnerability
- Cisco IOS XE Software
- Cross-site request forgery (CSRF)
Not analysed yet 21 Aug 2019
CVE-2019-1904 CVE record

CVSS 8.8 High

Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability
- Cisco IOS XE Software
- Cross-site request forgery (CSRF)
Not analysed yet 21 Jun 2019
CVE-2019-1862 CVE record

CVSS 7.2 High

Cisco IOS XE Software Web UI Command Injection Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 13 May 2019
CVE-2019-1759 CVE record

CVSS 5.3 Medium

Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability
- Cisco IOS XE Software
- Broken access control
Not analysed yet 28 Mar 2019
CVE-2019-1760 CVE record

CVSS 6.8 Medium

Cisco IOS XE Software Performance Routing Version 3 Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 28 Mar 2019
CVE-2019-1754 CVE record

CVSS 8.8 High

Cisco IOS XE Software Privilege Escalation Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 28 Mar 2019
CVE-2019-1755 CVE record

CVSS 6.5 Medium

Cisco IOS XE Software Command Injection Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 28 Mar 2019
CVE-2019-1756 CVE record

CVSS 7.2 High

Cisco IOS XE Software Command Injection Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 28 Mar 2019
CVE-2019-1753 CVE record

CVSS 8.8 High

Cisco IOS XE Software Privilege Escalation Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 28 Mar 2019
CVE-2019-1749 CVE record

CVSS 7.4 High

Cisco Aggregation Services Router 900 Route Switch Processor 3 OSPFv2 Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 27 Mar 2019
CVE-2019-1750 CVE record

CVSS 7.4 High

Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 27 Mar 2019
CVE-2019-1745 CVE record

CVSS 8.8 High

Cisco IOS XE Software Command Injection Vulnerability
- Cisco IOS XE Software
- Command injection
Not analysed yet 27 Mar 2019
CVE-2019-1742 CVE record

CVSS 7.5 High

Cisco IOS XE Software Information Disclosure Vulnerability
- Cisco IOS XE Software
- CWE-16
Not analysed yet 27 Mar 2019
CVE-2019-1743 CVE record

CVSS 8.8 High

Cisco IOS XE Software Arbitrary File Upload Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 27 Mar 2019
CVE-2019-1741 CVE record

CVSS 8.6 High

Cisco IOS XE Software Encrypted Traffic Analytics Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 27 Mar 2019
CVE-2018-15374 CVE record

Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability
- Cisco IOS XE Software
- Weak cryptography or TLS
Not analysed yet 5 Oct 2018
CVE-2018-15372 CVE record

Cisco IOS XE Software MACsec MKA Using EAP-TLS Authentication Bypass Vulnerability
- Cisco IOS XE Software
- Broken access control
Not analysed yet 5 Oct 2018
CVE-2018-15371 CVE record

Cisco IOS XE Software Shell Access Authentication Bypass Vulnerability
- Cisco IOS XE Software
- Broken access control
Not analysed yet 5 Oct 2018
CVE-2018-15368 CVE record

Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 5 Oct 2018
CVE-2018-0481 CVE record

Cisco IOS XE Software Command Injection Vulnerabilities
- Cisco IOS XE Software
- Command injection
Not analysed yet 5 Oct 2018
CVE-2018-0480 CVE record

Cisco IOS XE Software Errdisable Denial of Service Vulnerability
- Cisco IOS XE Software
- Race condition
Not analysed yet 5 Oct 2018