Advisories · Technology

Cisco IOS XE Software.

Every CVE that names Cisco IOS XE Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-20848 CVE record

CVSS 8.6 High

Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-399
Not analysed yet 30 Sept 2022
CVE-2022-20847 CVE record

CVSS 8.6 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-399
Not analysed yet 30 Sept 2022
CVE-2022-20810 CVE record

CVSS 6.5 Medium

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure Vulnerability
- Cisco IOS XE Software
- CWE-202
Not analysed yet 30 Sept 2022
CVE-2022-20676 CVE record

CVSS 5.1 Medium

Cisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability
- Cisco IOS XE Software
- Privilege escalation
Not analysed yet 15 Apr 2022
CVE-2022-20678 CVE record

CVSS 8.6 High

Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-413
Not analysed yet 15 Apr 2022
CVE-2022-20679 CVE record

CVSS 6.8 Medium

Cisco IOS XE Software IPSec Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 15 Apr 2022
CVE-2022-20681 CVE record

CVSS 7.8 High

Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Catalyst 9000 Family Wireless Controllers Privilege Escalation Vulnerability
- Cisco IOS XE Software
- Privilege escalation
Not analysed yet 15 Apr 2022
CVE-2022-20682 CVE record

CVSS 8.6 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-690
Not analysed yet 15 Apr 2022
CVE-2022-20683 CVE record

CVSS 8.6 High

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 15 Apr 2022
CVE-2022-20684 CVE record

CVSS 7.4 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 15 Apr 2022
CVE-2022-20692 CVE record

CVSS 7.7 High

Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability
- Cisco IOS XE Software
- Denial of service
Not analysed yet 15 Apr 2022
CVE-2022-20693 CVE record

CVSS 4.7 Medium

Cisco IOS XE Software Web UI API Injection Vulnerability
- Cisco IOS XE Software
- Other injection
Not analysed yet 15 Apr 2022
CVE-2022-20694 CVE record

CVSS 6.8 Medium

Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability
- Cisco IOS XE Software
- Denial of service
Not analysed yet 15 Apr 2022
CVE-2021-1621 CVE record

CVSS 7.4 High

Cisco IOS XE Software Interface Queue Wedge Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-399
Not analysed yet 23 Sept 2021
CVE-2021-1619 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 23 Sept 2021
CVE-2021-1616 CVE record

CVSS 4.7 Medium

Cisco IOS XE Software H.323 Application Level Gateway Bypass Vulnerability
- Cisco IOS XE Software
- CWE-693
Not analysed yet 23 Sept 2021
CVE-2021-1615 CVE record

CVSS 8.6 High

Cisco Embedded Wireless Controller Software for Catalyst Access Points Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-410
Not analysed yet 23 Sept 2021
CVE-2021-1611 CVE record

CVSS 8.6 High

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers EoGRE Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-399
Not analysed yet 23 Sept 2021
CVE-2021-1565 CVE record

CVSS 8.6 High

Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 23 Sept 2021
CVE-2021-34770 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 23 Sept 2021
CVE-2021-34769 CVE record

CVSS 8.6 High

Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 23 Sept 2021
CVE-2021-34768 CVE record

CVSS 8.6 High

Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 23 Sept 2021
CVE-2021-34767 CVE record

CVSS 7.4 High

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-670
Not analysed yet 23 Sept 2021
CVE-2021-34723 CVE record

CVSS 6.7 Medium

Cisco IOS XE SD-WAN Software Arbitrary File Overwrite Vulnerability
- Cisco IOS XE Software
- Information disclosure
Not analysed yet 23 Sept 2021
CVE-2021-34697 CVE record

CVSS 5.8 Medium

Cisco IOS XE Software Protection Against Distributed Denial of Service Attacks Feature Vulnerability
- Cisco IOS XE Software
- CWE-665
Not analysed yet 23 Sept 2021
CVE-2021-34696 CVE record

CVSS 5.8 Medium

Cisco ASR 900 and ASR 920 Series Aggregation Services Routers Access Control List Bypass Vulnerability
- Cisco IOS XE Software
- Broken access control
Not analysed yet 23 Sept 2021
CVE-2021-1625 CVE record

CVSS 5.8 Medium

Cisco IOS XE Software Zone-Based Policy Firewall ICMP and UDP Inspection Vulnerability
- Cisco IOS XE Software
- Broken access control
Not analysed yet 23 Sept 2021
CVE-2021-1624 CVE record

CVSS 8.6 High

Cisco IOS XE Software Rate Limiting Network Address Translation Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-399
Not analysed yet 23 Sept 2021
CVE-2021-1623 CVE record

CVSS 7.7 High

Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Simple Network Management Protocol Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-399
Not analysed yet 23 Sept 2021
CVE-2021-1622 CVE record

CVSS 8.6 High

Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Common Open Policy Service Denial of Service Vulnerability
- Cisco IOS XE Software
- Denial of service
Not analysed yet 23 Sept 2021
CVE-2021-1381 CVE record

CVSS 6.1 Medium

Cisco IOS XE Software Active Debug Code Vulnerability
- Cisco IOS XE Software
- CWE-489
Not analysed yet 24 Mar 2021
CVE-2021-1220 CVE record

CVSS 4.3 Medium

Cisco IOS XE Software Web UI Denial of Service Vulnerabilities
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Mar 2021
CVE-2021-1281 CVE record

CVSS 5.1 Medium

Cisco IOS XE SD-WAN Software Privilege Escalation Vulnerability
- Cisco IOS XE Software
- CWE-399
Not analysed yet 24 Mar 2021
CVE-2021-1352 CVE record

CVSS 7.4 High

Cisco IOS XE Software DECnet Phase IV/OSI Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-823
Not analysed yet 24 Mar 2021
CVE-2021-1356 CVE record

CVSS 4.3 Medium

Cisco IOS XE Software Web UI Denial of Service Vulnerabilities
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Mar 2021
CVE-2021-1371 CVE record

CVSS 6.6 Medium

Cisco IOS XE SD-WAN Software Console Privilege Escalation Vulnerability
- Cisco IOS XE Software
- Privilege escalation
Not analysed yet 24 Mar 2021
CVE-2021-1373 CVE record

CVSS 8.6 High

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-126
Not analysed yet 24 Mar 2021
CVE-2021-1374 CVE record

CVSS 4.8 Medium

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Stored Cross-Site Scripting Vulnerability
- Cisco IOS XE Software
- Cross-site scripting (XSS)
Not analysed yet 24 Mar 2021
CVE-2021-1375 CVE record

CVSS 6.7 Medium

Cisco IOS XE Software Fast Reload Vulnerabilities
- Cisco IOS XE Software
- Weak cryptography or TLS
Not analysed yet 24 Mar 2021
CVE-2021-1376 CVE record

CVSS 6.7 Medium

Cisco IOS XE Software Fast Reload Vulnerabilities
- Cisco IOS XE Software
- Weak cryptography or TLS
Not analysed yet 24 Mar 2021
CVE-2021-1382 CVE record

CVSS 6.0 Medium

Cisco IOS XE SD-WAN Software Command Injection Vulnerability
- Cisco IOS XE Software
- Command injection
Not analysed yet 24 Mar 2021
CVE-2021-1383 CVE record

CVSS 6.0 Medium

Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Mar 2021
CVE-2021-1384 CVE record

CVSS 6.5 Medium

Cisco IOx for IOS XE Software Command Injection Vulnerability
- Cisco IOS XE Software
- Command injection
Not analysed yet 24 Mar 2021
CVE-2021-1390 CVE record

CVSS 5.1 Medium

Cisco IOS XE Software Local Privilege Escalation Vulnerability
- Cisco IOS XE Software
- CWE-123
Not analysed yet 24 Mar 2021
CVE-2021-1394 CVE record

CVSS 5.3 Medium

Cisco IOS XE Software for Network Convergence System 520 Routers Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-399
Not analysed yet 24 Mar 2021
CVE-2021-1398 CVE record

CVSS 6.8 Medium

Cisco IOS XE Software Arbitrary Code Execution Vulnerability
- Cisco IOS XE Software
- CWE-489
Not analysed yet 24 Mar 2021
CVE-2021-1403 CVE record

CVSS 7.4 High

Cisco IOS XE Software Web UI Cross-Site WebSocket Hijacking Vulnerability
- Cisco IOS XE Software
- CWE-345
Not analysed yet 24 Mar 2021
CVE-2021-1454 CVE record

CVSS 6.0 Medium

Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Mar 2021
CVE-2021-1453 CVE record

CVSS 6.8 Medium

Cisco IOS XE Software for the Catalyst 9000 Family Arbitrary Code Execution Vulnerability
- Cisco IOS XE Software
- Weak cryptography or TLS
Not analysed yet 24 Mar 2021
CVE-2021-1451 CVE record

CVSS 8.1 High

Cisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution Vulnerability
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 24 Mar 2021
CVE-2021-1446 CVE record

CVSS 8.6 High

Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-754
Not analysed yet 24 Mar 2021
CVE-2021-1443 CVE record

CVSS 5.5 Medium

Cisco IOS XE Software Web UI OS Command Injection Vulnerability
- Cisco IOS XE Software
- Command injection
Not analysed yet 24 Mar 2021
CVE-2021-1441 CVE record

CVSS 6.7 Medium

Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability
- Cisco IOS XE Software
- Command injection
Not analysed yet 24 Mar 2021
CVE-2021-1442 CVE record

CVSS 7.0 High

Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability
- Cisco IOS XE Software
- Information disclosure
Not analysed yet 24 Mar 2021
CVE-2021-1436 CVE record

CVSS 4.4 Medium

Cisco IOS XE SD-WAN Software Path Traversal Vulnerability
- Cisco IOS XE Software
- Path traversal
Not analysed yet 24 Mar 2021
CVE-2021-1435 CVE record

CVSS 6.6 Medium

Cisco IOS XE Software Web UI Command Injection Vulnerability
- Cisco IOS XE Software
- Path traversal
Not analysed yet 24 Mar 2021
CVE-2021-1434 CVE record

CVSS 4.4 Medium

Cisco IOS XE SD-WAN Software Arbitrary File Corruption Vulnerability
- Cisco IOS XE Software
- Information disclosure
Not analysed yet 24 Mar 2021
CVE-2021-1433 CVE record

CVSS 8.1 High

Cisco IOS XE SD-WAN Software vDaemon Buffer Overflow Vulnerability
- Cisco IOS XE Software
- Memory corruption
Not analysed yet 24 Mar 2021
CVE-2021-1432 CVE record

CVSS 7.3 High

Cisco IOS XE SD-WAN Software Arbitrary Command Execution Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Mar 2021
CVE-2021-1431 CVE record

CVSS 7.5 High

Cisco IOS XE SD-WAN Software vDaemon Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-20
Not analysed yet 24 Mar 2021