Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco ios xe 17.6.1w vulnerabilities and exploits

(subscribe to this query)
7.4
CVSSv3
CVE-2024-20313
A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent malicious user to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper vali...
Cisco Ios Xe 17.5.1Cisco Ios Xe 17.5.1aCisco Ios Xe 17.6.1Cisco Ios Xe 17.6.1aCisco Ios Xe 17.6.1wCisco Ios Xe 17.6.3Cisco Ios Xe 17.9.1Cisco Ios Xe 17.6.2Cisco Ios Xe 17.6.3aCisco Ios Xe 17.7.1Cisco Ios Xe 17.7.1aCisco Ios Xe 17.7.2Cisco Ios Xe 17.8.1Cisco Ios Xe 17.8.1aCisco Ios Xe 17.11.1Cisco Ios Xe 17.10.1Cisco Ios Xe 17.6.4Cisco Ios Xe 17.9.1aCisco Ios Xe 17.9.1wCisco Ios Xe 17.6.1xCisco Ios Xe 17.6.1yCisco Ios Xe 17.6.1z
7.2
CVSSv3
CVE-2023-20273
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote malicious user to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending c...
Cisco Ios XeCisco Ios Xe
10
CVSSv3
CVE-2023-20198
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previou...
Cisco Ios Xe
6.6
CVSSv3
CVE-2023-20109
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affec...
Cisco Ios 15.2\\(4\\)eaCisco Ios 15.4\\(2\\)s2Cisco Ios 15.0\\(2\\)ex4Cisco Ios 15.1\\(3\\)s4Cisco Ios 15.3\\(2\\)s1Cisco Ios 15.1\\(1\\)sCisco Ios 15.1\\(2\\)sy10Cisco Ios 12.4\\(22\\)mda6Cisco Ios 15.5\\(1\\)t1Cisco Ios 15.4\\(2\\)s4Cisco Ios 15.2\\(2\\)e5bCisco Ios 15.0\\(1\\)xaCisco Ios 15.3\\(2\\)sCisco Ios 15.2\\(2\\)syCisco Ios 12.4\\(24\\)mda10Cisco Ios 15.6\\(2\\)sp2Cisco Ios 15.6\\(2\\)t3Cisco Ios 15.1\\(3\\)mra1Cisco Ios 15.6\\(1\\)t2Cisco Ios 15.2\\(3\\)e2Cisco Ios 12.4\\(22\\)xr12Cisco Ios 12.4\\(24\\)mdb15
9.1
CVSSv3
CVE-2023-20186
A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote malicious user to bypass command authorization and copy files to or from the file system of an affected device u...
Cisco Ios 15.2\\(4\\)eaCisco Ios 15.4\\(2\\)s2Cisco Ios 15.0\\(2\\)ex4Cisco Ios 15.1\\(3\\)s4Cisco Ios 15.3\\(2\\)s1Cisco Ios 15.1\\(1\\)sCisco Ios 15.1\\(2\\)sy10Cisco Ios 15.5\\(1\\)t1Cisco Ios 15.4\\(2\\)s4Cisco Ios 15.2\\(2\\)e5bCisco Ios 15.0\\(1\\)eyCisco Ios 15.0\\(1\\)xaCisco Ios 15.3\\(2\\)sCisco Ios 12.2\\(60\\)ez7Cisco Ios 12.2\\(58\\)exCisco Ios 15.2\\(2\\)syCisco Ios 15.6\\(2\\)sp2Cisco Ios 15.6\\(2\\)t3Cisco Ios 15.1\\(3\\)mra1Cisco Ios 15.6\\(1\\)t2Cisco Ios 15.2\\(3\\)e2Cisco Ios 15.1\\(2\\)sg4
8.8
CVSSv3
CVE-2023-20231
A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote malicious user to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sendin...
Cisco Ios Xe 16.12.4Cisco Ios Xe 16.12.4aCisco Ios Xe 16.12.5Cisco Ios Xe 16.12.5aCisco Ios Xe 16.12.5bCisco Ios Xe 16.12.6Cisco Ios Xe 16.12.6aCisco Ios Xe 16.12.7Cisco Ios Xe 16.12.8Cisco Ios Xe 16.12.9Cisco Ios Xe 17.2.2Cisco Ios Xe 17.2.3Cisco Ios Xe 17.3.1Cisco Ios Xe 17.3.1aCisco Ios Xe 17.3.1wCisco Ios Xe 17.3.1xCisco Ios Xe 17.3.1zCisco Ios Xe 17.3.2Cisco Ios Xe 17.3.3Cisco Ios Xe 17.3.4Cisco Ios Xe 17.3.4aCisco Ios Xe 17.3.4b
7.7
CVSSv3
CVE-2022-20679
A vulnerability in the IPSec decryption routine of Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to buffer exhaustion that occurs while...
Cisco Ios Xe 16.8.1Cisco Ios Xe 16.9.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.8.1bCisco Ios Xe 16.8.2Cisco Ios Xe 16.8.1dCisco Ios Xe 16.8.1cCisco Ios Xe 16.8.1eCisco Ios Xe 16.9.1sCisco Ios Xe 16.9.1cCisco Ios Xe 16.9.1bCisco Ios Xe 16.9.1dCisco Ios Xe 16.10.1Cisco Ios Xe 16.9.1aCisco Ios Xe 16.9.2aCisco Ios Xe 16.9.2Cisco Ios Xe 16.12.1Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.11.1aCisco Ios Xe 16.12.1c
7.8
CVSSv3
CVE-2022-20681
A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local malicious user to elevate privileges to level 15 on an affected device. This vulnerability is due to...
Cisco Ios Xe 16.12.1Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.11.1aCisco Ios Xe 16.12.1cCisco Ios Xe 16.12.1tCisco Ios Xe 16.11.2Cisco Ios Xe 16.12.1sCisco Ios Xe 16.12.1aCisco Ios Xe 16.12.1xCisco Ios Xe 16.11.1cCisco Ios Xe 16.11.1bCisco Ios Xe 16.11.1sCisco Ios Xe 16.12.1wCisco Ios Xe 16.12.1yCisco Ios Xe 16.12.2Cisco Ios Xe 16.12.2aCisco Ios Xe 16.12.4Cisco Ios Xe 16.12.3Cisco Ios Xe 17.2.1Cisco Ios Xe 17.4.1Cisco Ios Xe 17.1.1s
6.8
CVSSv3
CVE-2022-20694
A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause the Border Gateway Protocol (BGP) process to crash, resulting in a denial of service (DoS) condit...
Cisco Ios Xe 3.13.2sCisco Ios Xe 3.10.6sCisco Ios Xe 3.13.6sCisco Ios Xe 3.14.4sCisco Ios Xe 3.7.2tsCisco Ios Xe 3.15.1csCisco Ios Xe 3.13.4sCisco Ios Xe 16.2.1Cisco Ios Xe 16.1.3Cisco Ios Xe 3.13.0sCisco Ios Xe 3.18.2sCisco Ios Xe 16.1.2Cisco Ios Xe 3.8.0sCisco Ios Xe 3.17.3sCisco Ios Xe 3.16.0sCisco Ios Xe 3.8.1sCisco Ios Xe 3.14.1sCisco Ios Xe 3.7.1sCisco Ios Xe 3.12.2sCisco Ios Xe 3.16.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.8s
7.2
CVSSv3
CVE-2022-20693
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote malicious user to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability b...
Cisco Ios Xe 16.12.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.12.1cCisco Ios Xe 16.12.1tCisco Ios Xe 16.12.1sCisco Ios Xe 16.12.1aCisco Ios Xe 16.12.1xCisco Ios Xe 16.12.1wCisco Ios Xe 16.12.1yCisco Ios Xe 16.12.2Cisco Ios Xe 16.12.2aCisco Ios Xe 16.12.4Cisco Ios Xe 16.12.3Cisco Ios Xe 17.2.1Cisco Ios Xe 17.4.1Cisco Ios Xe 17.1.1sCisco Ios Xe 16.12.2tCisco Ios Xe 17.1.1aCisco Ios Xe 16.12.2sCisco Ios Xe 16.12.3aCisco Ios Xe 17.1.1tCisco Ios Xe 17.2.1a
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook