주요 제품 취약점 (58건)
"Cisco IOS" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Cisco IOS
Cisco IOS XE Web UI
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating…
|
CVE-2023-20198 | 10.0 | CWE-420 | KEV | 2023-10-16 |
|
Cisco IOS
Cisco IOS and IOS XE
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated,…
|
CVE-2017-3881 | 9.8 | CWE-20 | KEV | 2022-03-25 |
|
Cisco IOS
Cisco IOS and IOS XE Software
A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote atta…
|
CVE-2018-0151 | 9.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remot…
|
CVE-2017-12240 | 9.8 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigg…
|
CVE-2018-0171 | 9.8 | CWE-20 | KEV | 2021-11-03 |
|
Cisco IOS
Cisco IOS, XR, and XE Software
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisc…
|
CVE-2018-0167 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6744 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6743 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6740 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6738 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6736 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS XR
A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute…
|
CVE-2020-3118 | 8.8 | CWE-134 | KEV | 2021-11-03 |
|
Cisco IOS
Cisco IOS XE Software
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, rem…
|
CVE-2018-0174 | 8.6 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCP…
|
CVE-2018-0173 | 8.6 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, rem…
|
CVE-2018-0172 | 8.6 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS Software and Cisco IOS XE Software
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,…
|
CVE-2018-0158 | 8.6 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS XR
Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, r…
|
CVE-2020-3569 | 8.6 | CWE-400 | KEV | 2021-11-03 |
|
Cisco IOS
Cisco IOS XR
A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote att…
|
CVE-2020-3566 | 8.6 | CWE-400 | KEV | 2021-11-03 |
|
Cisco IOS
Cisco IOS, XR, and XE Software
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Soft…
|
CVE-2018-0175 | 8.0 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following:…
|
CVE-2025-20352 | 7.7 | CWE-121 | KEV | 2025-09-29 |
|
Cisco IOS
Cisco IOS, IOS XR, and IOS XE
The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and…
|
CVE-2016-6415 | 7.5 | CWE-200 | KEV | 2023-05-19 |
|
Cisco IOS
Cisco IOS XR
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to …
|
CVE-2010-3035 | 7.5 | CWE-20 | KEV | 2022-03-25 |
|
Cisco IOS
Cisco IOS Software and Cisco IOS XE Software
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could …
|
CVE-2018-0159 | 7.5 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS Software and Cisco IOS XE Software
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigg…
|
CVE-2018-0156 | 7.5 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS Software
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthentica…
|
CVE-2018-0154 | 7.5 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote atta…
|
CVE-2017-6627 | 7.5 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an…
|
CVE-2017-12237 | 7.5 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS software
A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an un…
|
CVE-2017-12235 | 7.5 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS software
Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthen…
|
CVE-2017-12234 | 7.5 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS software
Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthen…
|
CVE-2017-12233 | 7.5 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS software
A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticate…
|
CVE-2017-12231 | 7.5 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco Cisco IOS XE Web UI
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges o…
|
CVE-2023-20273 | 7.2 | CWE-78 | KEV | 2023-10-23 |
|
Cisco IOS
Cisco IOS and IOS XE
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authentic…
|
CVE-2023-20109 | 6.6 | CWE-787 | KEV | 2023-10-10 |
|
Cisco IOS
Cisco IOS XR
A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is…
|
CVE-2022-20821 | 6.5 | CWE-200 | KEV | 2022-05-23 |
|
Cisco IOS
Cisco IOS and IOS XE Software
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker…
|
CVE-2017-6663 | 6.5 | — | KEV | 2022-03-03 |
|
Cisco IOS
Cisco Catalyst 6800 Series Switches
A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an …
|
CVE-2017-12238 | 6.5 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS software
A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through…
|
CVE-2017-12232 | 6.5 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS Software
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches…
|
CVE-2018-0161 | 6.3 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP c…
|
CVE-2004-1464 | 5.9 | CWE-400 | KEV | 2023-05-19 |
|
Cisco IOS
Cisco IOS XR
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attrib…
|
CVE-2009-2055 | 5.9 | CWE-20 | KEV | 2022-03-25 |
|
Cisco IOS
Cisco IOS Software
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to tri…
|
CVE-2018-0180 | 5.9 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS Software
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to tri…
|
CVE-2018-0179 | 5.9 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS XE Software
A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthe…
|
CVE-2017-12319 | 5.9 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Rout…
|
CVE-2008-4128 | 4.3 | CWE-352 | KEV | 2026-07-13 |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20279 | 9.8 | CWE-284 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20274 | 9.8 | CWE-664 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20272 | 9.8 | CWE-74 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20267 | 9.0 | CWE-284 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comp…
|
CVE-2026-20280 | 8.8 | CWE-703 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20278 | 8.8 | CWE-707 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20275 | 8.8 | CWE-682 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20276 | 8.6 | CWE-691 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20273 | 8.6 | CWE-20 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20271 | 8.6 | CWE-691 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20270 | 8.6 | CWE-682 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20269 | 8.6 | CWE-664 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20268 | 8.6 | CWE-119 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehen…
|
CVE-2026-20277 | 8.2 | CWE-693 | — |