Cisco vulnerabilities
Published CVEs affecting Cisco products: 486 record(s), with severity, exploitation and fixes.
Cisco Secure Firewall Threat Defense (FTD) Software 66Cisco Identity Services Engine Software 63Secure Firewall Threat Defense 52Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 45Ios Xe 44Ios 43Identity Services Engine 42Adaptive Security Appliance Software 40Cisco ISE Passive Identity Connector 32Cisco IOS XE Software 31Cisco Secure Firewall Management Center (FMC) 28Identity Services Engine Passive Identity Connector 26Catalyst Sd-wan Manager 21Cisco NX-OS Software 18Ios Xr 17Cisco Secure Endpoint 15Cisco Unified Computing System (Standalone) 14Cisco Unified Computing System (Managed) 13Cisco IOS XR Software 13Enterprise Nfv Infrastructure Software 12Unified Computing System 12Cisco UTD SNORT IPS Engine Software 12Cisco Unified Computing System E-Series Software (UCSE) 12Cyber Vision 11Cisco RoomOS Software 10Cisco NX-OS System Software in ACI Mode 10Snort 10Nexus Dashboard 10Cisco Secure Email 9Unity Connection 9Unified Contact Center Express 9Unified Computing System E-series Software 9Unified Threat Defense Snort Intrusion Prevention System Engine 9Cisco License On-Prem 8Roomos 8Cisco Catalyst SD-WAN Controller 7Cisco Campus Gateway Software 7Cisco Meraki MR Wireless Access Points Software 7Prime Infrastructure 7Cisco Meraki MX Firmware 7
CVE-2017-3881
Critical · 9.8
KEV Urgent · 83 Public exploit CWE-20 Mar 17, 2017
Cisco IOS and IOS XE Remote Code Execution Vulnerability
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device; and (2) the incorrect processing of malformed CMP-specific Telnet options. An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device. This affects Catalyst switches, Embedded Service 2020 switches, Enhanced Layer 2 EtherSwitch Service Module, Enhanced Layer 2/3 EtherSwitch Service Module, Gigabit Ethernet Switch Module (CGESM) for HP, IE Industrial Ethernet switches, ME 4924-10GE switch, RF Gateway 10, and SM-X Layer 2/3 EtherSwitch Service Module. Cisco Bug IDs: CSCvd48893.
CVE-2016-6415
High · 7.5
KEV Urgent · 79 Public exploit CWE-200 Sep 18, 2016
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN.
CVE-2016-6367
High · 7.8
KEV High · 64 Public exploit CWE-77 Aug 18, 2016
Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.
CVE-2016-6366
High · 8.8
KEV Urgent · 76 Public exploit CWE-120 Aug 18, 2016
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
CVE-2015-0666
High · 7.5
KEV High · 59 CWE-22 Apr 3, 2015
Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
CVE-2014-2120
Medium · 6.1
KEV High · 53 CWE-79 Mar 18, 2014
Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.
CVE-2010-3035
High · 7.5
KEV High · 58 Aug 30, 2010
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.
CVE-2009-2055
Medium · 5.9
KEV High · 51 CWE-20 Aug 19, 2009
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.
CVE-2008-4128
High · 8.1
KEV High · 64 Public exploit CWE-352 Sep 18, 2008
Cisco IOS Cross-Site Request Forgery Vulnerability
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information.
CVE-2004-1464
Medium · 5.9
KEV High · 52 CWE-400 Dec 31, 2004
Cisco IOS Denial-of-Service Vulnerability
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
CVE-2001-1210
Medium · 6.4
Dec 30, 2001
Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface…
Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.