Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco ios xe 3.10.2e vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv2
CVE-2020-3209
A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical malicious user to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an improper check on the ...
Cisco Ios Xe 3.2.0seCisco Ios Xe 3.2.0sgCisco Ios Xe 3.2.1seCisco Ios Xe 3.2.1sgCisco Ios Xe 3.2.2seCisco Ios Xe 3.2.2sgCisco Ios Xe 3.2.3seCisco Ios Xe 3.2.3sgCisco Ios Xe 3.2.4sgCisco Ios Xe 3.2.5sgCisco Ios Xe 3.2.6sgCisco Ios Xe 3.2.7sgCisco Ios Xe 3.2.8sgCisco Ios Xe 3.2.9sgCisco Ios Xe 3.2.10sgCisco Ios Xe 3.2.11sgCisco Ios Xe 3.3.0seCisco Ios Xe 3.3.0sgCisco Ios Xe 3.3.0sqCisco Ios Xe 3.3.0xoCisco Ios Xe 3.3.1seCisco Ios Xe 3.3.1sg
7.2
CVSSv2
CVE-2020-3215
A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local malicious user to gain root-level privileges on an affected device. The vulnerability is due to insufficient validation of a user-supplied open virtual appliance (OVA). ...
Cisco Ios Xe 3.7.0eCisco Ios Xe 3.7.1eCisco Ios Xe 3.7.2eCisco Ios Xe 3.7.3eCisco Ios Xe 3.7.4eCisco Ios Xe 3.7.5eCisco Ios Xe 3.8.0eCisco Ios Xe 3.8.0sCisco Ios Xe 3.8.1eCisco Ios Xe 3.8.1sCisco Ios Xe 3.8.2eCisco Ios Xe 3.8.2sCisco Ios Xe 3.8.3eCisco Ios Xe 3.8.4eCisco Ios Xe 3.8.5aeCisco Ios Xe 3.8.5eCisco Ios Xe 3.8.6eCisco Ios Xe 3.8.7eCisco Ios Xe 3.8.8eCisco Ios Xe 3.9.0asCisco Ios Xe 3.9.0eCisco Ios Xe 3.9.0s
6.9
CVSSv2
CVE-2021-1442
A vulnerability in a diagnostic command for the Plug-and-Play (PnP) subsystem of Cisco IOS XE Software could allow an authenticated, local malicious user to elevate privileges to the level of an Administrator user (level 15) on an affected device. The vulnerability is due to insu...
Cisco Ios Xe 3.6.3eCisco Ios Xe 3.6.4eCisco Ios Xe 3.6.5aeCisco Ios Xe 3.6.5beCisco Ios Xe 3.6.5eCisco Ios Xe 3.6.6eCisco Ios Xe 3.6.7aeCisco Ios Xe 3.6.7beCisco Ios Xe 3.6.7eCisco Ios Xe 3.6.8eCisco Ios Xe 3.6.9aeCisco Ios Xe 3.6.9eCisco Ios Xe 3.6.10eCisco Ios Xe 3.7.3eCisco Ios Xe 3.7.4eCisco Ios Xe 3.7.5eCisco Ios Xe 3.8.0eCisco Ios Xe 3.8.1eCisco Ios Xe 3.8.2eCisco Ios Xe 3.8.3eCisco Ios Xe 3.8.4eCisco Ios Xe 3.8.5ae
7.2
CVSSv2
CVE-2021-1391
A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local malicious user to escalate from privilege level 15 to root privilege. The vulnerability is due to the presence of development testing and verification scripts that remained on t...
Cisco Ios Xe 3.9.0eCisco Ios 15.2\\(5a\\)e1Cisco Ios 15.2\\(5\\)eaCisco Ios 15.2\\(5c\\)eCisco Ios 15.2\\(5\\)e2Cisco Ios 15.2\\(5b\\)eCisco Ios 15.2\\(5\\)exCisco Ios 15.2\\(5a\\)eCisco Ios 15.2\\(5\\)e1Cisco Ios 15.2\\(5\\)eCisco Ios Xe 3.9.1eCisco Ios 15.2\\(5\\)e2bCisco Ios 15.2\\(5\\)e2cCisco Ios Xe 3.9.2eCisco Ios Xe 16.8.1Cisco Ios Xe 16.9.1Cisco Ios 12.2\\(6\\)i1Cisco Ios Xe 3.9.2beCisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.8.1bCisco Ios Xe 16.8.2
5
CVSSv2
CVE-2021-1377
A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote malicious user to prevent an affected device from resolving ARP entries for legitimate hosts on the connected subnets. This vulne...
Cisco Ios 15.5\\(3\\)m4aCisco Ios 15.4\\(1\\)syCisco Ios Xe 3.6.6eCisco Ios 15.2\\(2\\)e6Cisco Ios Xe 3.16.4sCisco Ios 15.6\\(3\\)m3Cisco Ios 15.5\\(3\\)s5Cisco Ios 15.2\\(3\\)e5Cisco Ios 15.2\\(5a\\)e1Cisco Ios 15.7\\(3\\)mCisco Ios Xe 3.8.4eCisco Ios 15.6\\(3\\)m2aCisco Ios Xe 3.6.7eCisco Ios 15.5\\(3\\)s4Cisco Ios Xe 16.6.1Cisco Ios Xe 3.16.6sCisco Ios 15.4\\(1\\)sy2Cisco Ios Xe 3.16.5sCisco Ios Xe 3.7.5eCisco Ios 15.4\\(1\\)sy1Cisco Ios 15.2\\(5\\)e2Cisco Ios 15.5\\(3\\)m6
7.8
CVSSv2
CVE-2020-3228
A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote malicious user to cause the affected device to reload, resulting in a denial of service (DoS) condition. The...
Cisco Ios 12.2\\(6\\)i1Cisco Ios 15.1\\(1\\)syCisco Ios 15.1\\(1\\)sy1Cisco Ios 15.1\\(1\\)sy2Cisco Ios 15.1\\(1\\)sy3Cisco Ios 15.1\\(1\\)sy4Cisco Ios 15.1\\(1\\)sy5Cisco Ios 15.1\\(1\\)sy6Cisco Ios 15.1\\(2\\)syCisco Ios 15.1\\(2\\)sy1Cisco Ios 15.1\\(2\\)sy2Cisco Ios 15.1\\(2\\)sy3Cisco Ios 15.1\\(2\\)sy4Cisco Ios 15.1\\(2\\)sy4aCisco Ios 15.1\\(2\\)sy5Cisco Ios 15.1\\(2\\)sy6Cisco Ios 15.1\\(2\\)sy7Cisco Ios 15.1\\(2\\)sy8Cisco Ios 15.1\\(2\\)sy9Cisco Ios 15.1\\(2\\)sy10Cisco Ios 15.1\\(2\\)sy11Cisco Ios 15.1\\(2\\)sy12
NA
CVE-2023-20080
A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote malicious user to trigger a denial of service (DoS) condition. This vulnerability is due to insufficient validation of data bounda...
Cisco Ios 15.2\\(4\\)eaCisco Ios 15.4\\(2\\)s2Cisco Ios Xe 3.13.2sCisco Ios 15.3\\(2\\)s1Cisco Ios Xe 3.10.6sCisco Ios 15.1\\(2\\)sy10Cisco Ios Xe 3.6.5beCisco Ios Xe 3.13.6sCisco Ios 15.5\\(1\\)t1Cisco Ios 15.4\\(2\\)s4Cisco Ios 15.2\\(2\\)e5bCisco Ios 15.3\\(2\\)sCisco Ios Xe 3.14.4sCisco Ios Xe 3.7.2tsCisco Ios 15.2\\(2\\)syCisco Ios 15.6\\(2\\)sp2Cisco Ios Xe 3.7.4eCisco Ios Xe 3.15.1csCisco Ios 15.6\\(2\\)t3Cisco Ios Xe 3.9.0eCisco Ios 15.6\\(1\\)t2Cisco Ios 15.2\\(3\\)e2
NA
CVE-2023-20186
A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote malicious user to bypass command authorization and copy files to or from the file system of an affected device u...
Cisco Ios 15.2\\(4\\)eaCisco Ios 15.4\\(2\\)s2Cisco Ios 15.0\\(2\\)ex4Cisco Ios 15.1\\(3\\)s4Cisco Ios 15.3\\(2\\)s1Cisco Ios 15.1\\(1\\)sCisco Ios 15.1\\(2\\)sy10Cisco Ios 15.5\\(1\\)t1Cisco Ios 15.4\\(2\\)s4Cisco Ios 15.2\\(2\\)e5bCisco Ios 15.0\\(1\\)eyCisco Ios 15.0\\(1\\)xaCisco Ios 15.3\\(2\\)sCisco Ios 12.2\\(60\\)ez7Cisco Ios 12.2\\(58\\)exCisco Ios 15.2\\(2\\)syCisco Ios 15.6\\(2\\)sp2Cisco Ios 15.6\\(2\\)t3Cisco Ios 15.1\\(3\\)mra1Cisco Ios 15.6\\(1\\)t2Cisco Ios 15.2\\(3\\)e2Cisco Ios 15.1\\(2\\)sg4
NA
CVE-2023-20109
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affec...
Cisco Ios 15.2\\(4\\)eaCisco Ios 15.4\\(2\\)s2Cisco Ios 15.0\\(2\\)ex4Cisco Ios 15.1\\(3\\)s4Cisco Ios 15.3\\(2\\)s1Cisco Ios 15.1\\(1\\)sCisco Ios 15.1\\(2\\)sy10Cisco Ios 12.4\\(22\\)mda6Cisco Ios 15.5\\(1\\)t1Cisco Ios 15.4\\(2\\)s4Cisco Ios 15.2\\(2\\)e5bCisco Ios 15.0\\(1\\)xaCisco Ios 15.3\\(2\\)sCisco Ios 15.2\\(2\\)syCisco Ios 12.4\\(24\\)mda10Cisco Ios 15.6\\(2\\)sp2Cisco Ios 15.6\\(2\\)t3Cisco Ios 15.1\\(3\\)mra1Cisco Ios 15.6\\(1\\)t2Cisco Ios 15.2\\(3\\)e2Cisco Ios 12.4\\(22\\)xr12Cisco Ios 12.4\\(24\\)mdb15
6.8
CVSSv2
CVE-2021-34699
A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote malicious user to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker cou...
Cisco Ios 15.2\\(4\\)eaCisco Ios 15.4\\(2\\)s2Cisco Ios Xe 3.13.2sCisco Ios 15.0\\(2\\)ex4Cisco Ios 15.1\\(2\\)sy10Cisco Ios Xe 3.6.5beCisco Ios Xe 3.13.6sCisco Ios 15.5\\(1\\)t1Cisco Ios 15.4\\(2\\)s4Cisco Ios 15.2\\(2\\)e5bCisco Ios Xe 3.14.4sCisco Ios 15.0\\(1\\)sy1Cisco Ios 15.2\\(2\\)syCisco Ios 15.6\\(2\\)sp2Cisco Ios Xe 3.7.4eCisco Ios Xe 3.15.1csCisco Ios 15.6\\(2\\)t3Cisco Ios Xe 3.9.0eCisco Ios 15.6\\(1\\)t2Cisco Ios 15.2\\(3\\)e2Cisco Ios Xe 3.13.4sCisco Ios 15.5\\(3\\)s1a
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middleCVE-2024-34558CVE-2024-32674CVE-2024-34351XPath injectionCVE-2023-45866CVE-2024-25528CVE-2024-25517path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook