Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco ios xe 16.12.1c vulnerabilities and exploits

(subscribe to this query)
9
CVSSv2
CVE-2022-20693
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote malicious user to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability b...
Cisco Ios Xe 16.12.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.12.1cCisco Ios Xe 16.12.1tCisco Ios Xe 16.12.1sCisco Ios Xe 16.12.1aCisco Ios Xe 16.12.1xCisco Ios Xe 16.12.1wCisco Ios Xe 16.12.1yCisco Ios Xe 16.12.2Cisco Ios Xe 16.12.2aCisco Ios Xe 16.12.4Cisco Ios Xe 16.12.3Cisco Ios Xe 17.2.1Cisco Ios Xe 17.4.1Cisco Ios Xe 17.1.1sCisco Ios Xe 16.12.2tCisco Ios Xe 17.1.1aCisco Ios Xe 16.12.2sCisco Ios Xe 16.12.3aCisco Ios Xe 17.1.1tCisco Ios Xe 17.2.1a
7.2
CVSSv2
CVE-2021-1375
Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could allow an authenticated, local malicious user to either execute arbitrary code on the underlying operati...
Cisco Ios Xe 16.5.1Cisco Ios Xe 16.5.1aCisco Ios Xe 16.6.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.6.3Cisco Ios Xe 16.6.4Cisco Ios Xe 16.6.4aCisco Ios Xe 16.6.4sCisco Ios Xe 16.6.5Cisco Ios Xe 16.6.6Cisco Ios Xe 16.6.7Cisco Ios Xe 16.8.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.9.1Cisco Ios Xe 16.9.1sCisco Ios Xe 16.9.2Cisco Ios Xe 16.9.2sCisco Ios Xe 16.9.3Cisco Ios Xe 16.9.3aCisco Ios Xe 16.9.3sCisco Ios Xe 16.9.4
3.6
CVSSv2
CVE-2021-1381
A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. A...
Cisco Ios Xe 16.12.1Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.11.1aCisco Ios Xe 16.12.1cCisco Ios Xe 16.12.1tCisco Ios Xe 16.11.2Cisco Ios Xe 16.12.1sCisco Ios Xe 16.12.1aCisco Ios Xe 16.12.1xCisco Ios Xe 16.11.1cCisco Ios Xe 16.11.1bCisco Ios Xe 16.11.1sCisco Ios Xe 16.12.1wCisco Ios Xe 16.12.1yCisco Ios Xe 16.12.2Cisco Ios Xe 16.12.2aCisco Ios Xe 16.12.4Cisco Ios Xe 16.12.3Cisco Ios Xe 17.2.1Cisco Ios Xe 17.1.1sCisco Ios Xe 16.12.2t
7.2
CVSSv2
CVE-2021-1376
Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could allow an authenticated, local malicious user to either execute arbitrary code on the underlying operati...
Cisco Ios Xe 16.5.1Cisco Ios Xe 16.5.1aCisco Ios Xe 16.6.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.6.3Cisco Ios Xe 16.6.4Cisco Ios Xe 16.6.4aCisco Ios Xe 16.6.4sCisco Ios Xe 16.6.5Cisco Ios Xe 16.6.6Cisco Ios Xe 16.6.7Cisco Ios Xe 16.6.8Cisco Ios Xe 16.8.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.9.1Cisco Ios Xe 16.9.1sCisco Ios Xe 16.9.2Cisco Ios Xe 16.9.2sCisco Ios Xe 16.9.3Cisco Ios Xe 16.9.3aCisco Ios Xe 16.9.3s
7.2
CVSSv2
CVE-2020-3417
A vulnerability in Cisco IOS XE Software could allow an authenticated, local malicious user to execute persistent code at boot time and break the chain of trust. This vulnerability is due to incorrect validations by boot scripts when specific ROM monitor (ROMMON) variables are se...
Cisco Ios Xe 3.18.2aspCisco Ios Xe 3.18.3spCisco Ios Xe 16.6.1Cisco Ios Xe 3.18.1spCisco Ios Xe 3.18.1bspCisco Ios Xe 3.18.1cspCisco Ios Xe 3.18.2spCisco Ios Xe 3.18.0spCisco Ios Xe 3.18.1aspCisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.8.1bCisco Ios Xe 16.8.2Cisco Ios Xe 16.7.2Cisco Ios Xe 16.8.1dCisco Ios Xe 16.7.3Cisco Ios Xe 16.7.1a
7.2
CVSSv2
CVE-2021-1390
A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local malicious user to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker would need to have valid user credentials at privile...
Cisco Ios Xe 16.8.1Cisco Ios Xe 16.9.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.8.1bCisco Ios Xe 16.8.2Cisco Ios Xe 16.8.1dCisco Ios Xe 16.8.1cCisco Ios Xe 16.8.1eCisco Ios Xe 16.9.1sCisco Ios Xe 16.9.1cCisco Ios Xe 16.9.1bCisco Ios Xe 16.9.1dCisco Ios Xe 16.10.1Cisco Ios Xe 16.9.1aCisco Ios Xe 16.9.2aCisco Ios Xe 16.9.2Cisco Ios Xe 16.12.1Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.11.1aCisco Ios Xe 16.12.1c
7.2
CVSSv2
CVE-2021-1453
A vulnerability in the software image verification functionality of Cisco IOS XE Software for the Cisco Catalyst 9000 Family of switches could allow an unauthenticated, physical malicious user to execute unsigned code at system boot time. The vulnerability is due to an improper c...
Cisco Ios Xe 16.6.1Cisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.9.1sCisco Ios Xe 16.6.4sCisco Ios Xe 16.6.4Cisco Ios Xe 16.10.1Cisco Ios Xe 16.9.2Cisco Ios Xe 16.6.4aCisco Ios Xe 16.12.1Cisco Ios Xe 16.6.5Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.12.1cCisco Ios Xe 16.11.2Cisco Ios Xe 16.12.1sCisco Ios Xe 16.11.1c
3.5
CVSSv2
CVE-2021-1374
A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against another user of the web-based man...
Cisco Ios Xe 16.6.1Cisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.8.1bCisco Ios Xe 16.8.2Cisco Ios Xe 16.7.2Cisco Ios Xe 16.8.1dCisco Ios Xe 16.7.3Cisco Ios Xe 16.7.1aCisco Ios Xe 16.7.1bCisco Ios Xe 16.8.1cCisco Ios Xe 16.8.1eCisco Ios Xe 16.9.1sCisco Ios Xe 16.9.1cCisco Ios Xe 16.9.1bCisco Ios Xe 16.9.1dCisco Ios Xe 16.6.4s
7.2
CVSSv2
CVE-2022-20681
A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local malicious user to elevate privileges to level 15 on an affected device. This vulnerability is due to...
Cisco Ios Xe 16.12.1Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.11.1aCisco Ios Xe 16.12.1cCisco Ios Xe 16.12.1tCisco Ios Xe 16.11.2Cisco Ios Xe 16.12.1sCisco Ios Xe 16.12.1aCisco Ios Xe 16.12.1xCisco Ios Xe 16.11.1cCisco Ios Xe 16.11.1bCisco Ios Xe 16.11.1sCisco Ios Xe 16.12.1wCisco Ios Xe 16.12.1yCisco Ios Xe 16.12.2Cisco Ios Xe 16.12.2aCisco Ios Xe 16.12.4Cisco Ios Xe 16.12.3Cisco Ios Xe 17.2.1Cisco Ios Xe 17.4.1Cisco Ios Xe 17.1.1s
7.2
CVSSv2
CVE-2020-3213
A vulnerability in the ROMMON of Cisco IOS XE Software could allow an authenticated, local malicious user to elevate privileges to those of the root user of the underlying operating system. The vulnerability is due to the ROMMON allowing for special parameters to be passed to the...
Cisco Ios Xe 3.8.0sCisco Ios Xe 3.8.1sCisco Ios Xe 3.8.2sCisco Ios Xe 3.9.0asCisco Ios Xe 3.9.0sCisco Ios Xe 3.9.1asCisco Ios Xe 3.9.1sCisco Ios Xe 3.9.2sCisco Ios Xe 3.10.0sCisco Ios Xe 3.10.1sCisco Ios Xe 3.10.2asCisco Ios Xe 3.10.2sCisco Ios Xe 3.10.2tsCisco Ios Xe 3.10.3sCisco Ios Xe 3.10.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.6sCisco Ios Xe 3.10.7sCisco Ios Xe 3.10.8asCisco Ios Xe 3.10.8sCisco Ios Xe 3.10.9sCisco Ios Xe 3.10.10s
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook