Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco ios xe 3.18.2sp vulnerabilities and exploits

(subscribe to this query)
6.7
CVSSv3
CVE-2020-3417
A vulnerability in Cisco IOS XE Software could allow an authenticated, local malicious user to execute persistent code at boot time and break the chain of trust. This vulnerability is due to incorrect validations by boot scripts when specific ROM monitor (ROMMON) variables are se...
Cisco Ios Xe 3.18.2aspCisco Ios Xe 3.18.3spCisco Ios Xe 16.6.1Cisco Ios Xe 3.18.1spCisco Ios Xe 3.18.1bspCisco Ios Xe 3.18.1cspCisco Ios Xe 3.18.2spCisco Ios Xe 3.18.0spCisco Ios Xe 3.18.1aspCisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.8.1bCisco Ios Xe 16.8.2Cisco Ios Xe 16.7.2Cisco Ios Xe 16.8.1dCisco Ios Xe 16.7.3Cisco Ios Xe 16.7.1a
6.8
CVSSv3
CVE-2020-3209
A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical malicious user to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an improper check on the ...
Cisco Ios Xe 3.2.0seCisco Ios Xe 3.2.0sgCisco Ios Xe 3.2.1seCisco Ios Xe 3.2.1sgCisco Ios Xe 3.2.2seCisco Ios Xe 3.2.2sgCisco Ios Xe 3.2.3seCisco Ios Xe 3.2.3sgCisco Ios Xe 3.2.4sgCisco Ios Xe 3.2.5sgCisco Ios Xe 3.2.6sgCisco Ios Xe 3.2.7sgCisco Ios Xe 3.2.8sgCisco Ios Xe 3.2.9sgCisco Ios Xe 3.2.10sgCisco Ios Xe 3.2.11sgCisco Ios Xe 3.3.0seCisco Ios Xe 3.3.0sgCisco Ios Xe 3.3.0sqCisco Ios Xe 3.3.0xoCisco Ios Xe 3.3.1seCisco Ios Xe 3.3.1sg
6.7
CVSSv3
CVE-2020-3213
A vulnerability in the ROMMON of Cisco IOS XE Software could allow an authenticated, local malicious user to elevate privileges to those of the root user of the underlying operating system. The vulnerability is due to the ROMMON allowing for special parameters to be passed to the...
Cisco Ios Xe 3.8.0sCisco Ios Xe 3.8.1sCisco Ios Xe 3.8.2sCisco Ios Xe 3.9.0asCisco Ios Xe 3.9.0sCisco Ios Xe 3.9.1asCisco Ios Xe 3.9.1sCisco Ios Xe 3.9.2sCisco Ios Xe 3.10.0sCisco Ios Xe 3.10.1sCisco Ios Xe 3.10.2asCisco Ios Xe 3.10.2sCisco Ios Xe 3.10.2tsCisco Ios Xe 3.10.3sCisco Ios Xe 3.10.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.6sCisco Ios Xe 3.10.7sCisco Ios Xe 3.10.8asCisco Ios Xe 3.10.8sCisco Ios Xe 3.10.9sCisco Ios Xe 3.10.10s
6.7
CVSSv3
CVE-2020-3215
A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local malicious user to gain root-level privileges on an affected device. The vulnerability is due to insufficient validation of a user-supplied open virtual appliance (OVA). ...
Cisco Ios Xe 3.7.0eCisco Ios Xe 3.7.1eCisco Ios Xe 3.7.2eCisco Ios Xe 3.7.3eCisco Ios Xe 3.7.4eCisco Ios Xe 3.7.5eCisco Ios Xe 3.8.0eCisco Ios Xe 3.8.0sCisco Ios Xe 3.8.1eCisco Ios Xe 3.8.1sCisco Ios Xe 3.8.2eCisco Ios Xe 3.8.2sCisco Ios Xe 3.8.3eCisco Ios Xe 3.8.4eCisco Ios Xe 3.8.5aeCisco Ios Xe 3.8.5eCisco Ios Xe 3.8.6eCisco Ios Xe 3.8.7eCisco Ios Xe 3.8.8eCisco Ios Xe 3.9.0asCisco Ios Xe 3.9.0eCisco Ios Xe 3.9.0s
7.8
CVSSv3
CVE-2021-1442
A vulnerability in a diagnostic command for the Plug-and-Play (PnP) subsystem of Cisco IOS XE Software could allow an authenticated, local malicious user to elevate privileges to the level of an Administrator user (level 15) on an affected device. The vulnerability is due to insu...
Cisco Ios Xe 3.6.3eCisco Ios Xe 3.6.4eCisco Ios Xe 3.6.5aeCisco Ios Xe 3.6.5beCisco Ios Xe 3.6.5eCisco Ios Xe 3.6.6eCisco Ios Xe 3.6.7aeCisco Ios Xe 3.6.7beCisco Ios Xe 3.6.7eCisco Ios Xe 3.6.8eCisco Ios Xe 3.6.9aeCisco Ios Xe 3.6.9eCisco Ios Xe 3.6.10eCisco Ios Xe 3.7.3eCisco Ios Xe 3.7.4eCisco Ios Xe 3.7.5eCisco Ios Xe 3.8.0eCisco Ios Xe 3.8.1eCisco Ios Xe 3.8.2eCisco Ios Xe 3.8.3eCisco Ios Xe 3.8.4eCisco Ios Xe 3.8.5ae
6.8
CVSSv3
CVE-2021-1398
A vulnerability in the boot logic of Cisco IOS XE Software could allow an authenticated, local attacker with level 15 privileges or an unauthenticated attacker with physical access to execute arbitrary code on the underlying Linux operating system of an affected device. This vuln...
Cisco Ios Xe 3.13.2sCisco Ios Xe 3.10.6sCisco Ios Xe 3.13.6sCisco Ios Xe 3.14.4sCisco Ios Xe 3.7.2tsCisco Ios Xe 3.15.1csCisco Ios Xe 3.13.4sCisco Ios Xe 16.2.1Cisco Ios Xe 16.1.3Cisco Ios Xe 3.13.0sCisco Ios Xe 3.18.2sCisco Ios Xe 16.1.2Cisco Ios Xe 3.8.0sCisco Ios Xe 3.17.3sCisco Ios Xe 3.16.0sCisco Ios Xe 3.8.1sCisco Ios Xe 3.14.1sCisco Ios Xe 3.7.1sCisco Ios Xe 3.12.2sCisco Ios Xe 3.16.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.8s
6.8
CVSSv3
CVE-2022-20694
A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause the Border Gateway Protocol (BGP) process to crash, resulting in a denial of service (DoS) condit...
Cisco Ios Xe 3.13.2sCisco Ios Xe 3.10.6sCisco Ios Xe 3.13.6sCisco Ios Xe 3.14.4sCisco Ios Xe 3.7.2tsCisco Ios Xe 3.15.1csCisco Ios Xe 3.13.4sCisco Ios Xe 16.2.1Cisco Ios Xe 16.1.3Cisco Ios Xe 3.13.0sCisco Ios Xe 3.18.2sCisco Ios Xe 16.1.2Cisco Ios Xe 3.8.0sCisco Ios Xe 3.17.3sCisco Ios Xe 3.16.0sCisco Ios Xe 3.8.1sCisco Ios Xe 3.14.1sCisco Ios Xe 3.7.1sCisco Ios Xe 3.12.2sCisco Ios Xe 3.16.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.8s
7.8
CVSSv3
CVE-2019-1745
A vulnerability in Cisco IOS XE Software could allow an authenticated, local malicious user to inject arbitrary commands that are executed with elevated privileges. The vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could explo...
Cisco Ios Xe 3.6.10eCisco Ios Xe 3.10.0sCisco Ios Xe 3.10.1sCisco Ios Xe 3.10.2asCisco Ios Xe 3.10.2sCisco Ios Xe 3.10.2tsCisco Ios Xe 3.10.3sCisco Ios Xe 3.10.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.6sCisco Ios Xe 3.10.7sCisco Ios Xe 3.10.8asCisco Ios Xe 3.10.8sCisco Ios Xe 3.10.9sCisco Ios Xe 3.10.10sCisco Ios Xe 3.11.0sCisco Ios Xe 3.11.1sCisco Ios Xe 3.11.2sCisco Ios Xe 3.11.3sCisco Ios Xe 3.11.4sCisco Ios Xe 3.12.0asCisco Ios Xe 3.12.0s
6.8
CVSSv3
CVE-2017-12239
A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, physical malicious user to access an affected device's operating system. The vulnerab...
Cisco Ios Xe 3.13.0asCisco Ios Xe 3.13.0sCisco Ios Xe 3.13.1sCisco Ios Xe 3.13.2asCisco Ios Xe 3.13.2sCisco Ios Xe 3.13.3sCisco Ios Xe 3.13.4sCisco Ios Xe 3.13.5asCisco Ios Xe 3.13.5sCisco Ios Xe 3.13.6asCisco Ios Xe 3.13.6sCisco Ios Xe 3.14.0sCisco Ios Xe 3.14.1sCisco Ios Xe 3.14.2sCisco Ios Xe 3.14.3sCisco Ios Xe 3.14.4sCisco Ios Xe 3.15.0sCisco Ios Xe 3.15.1csCisco Ios Xe 3.15.1sCisco Ios Xe 3.15.2sCisco Ios Xe 3.15.3sCisco Ios Xe 3.15.4s
7.5
CVSSv3
CVE-2021-1446
A vulnerability in the DNS application layer gateway (ALG) functionality used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause an affected device to reload. The vulnerability is due to a logic error that ...
Cisco Ios Xe 3.13.2sCisco Ios Xe 3.10.6sCisco Ios Xe 3.13.6sCisco Ios Xe 3.14.4sCisco Ios Xe 3.7.2tsCisco Ios Xe 3.15.1csCisco Ios Xe 3.13.4sCisco Ios Xe 16.2.1Cisco Ios Xe 16.1.3Cisco Ios Xe 3.13.0sCisco Ios Xe 3.18.2sCisco Ios Xe 16.1.2Cisco Ios Xe 3.8.0sCisco Ios Xe 3.17.3sCisco Ios Xe 3.16.0sCisco Ios Xe 3.8.1sCisco Ios Xe 3.14.1sCisco Ios Xe 3.7.1sCisco Ios Xe 3.12.2sCisco Ios Xe 3.16.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.8s
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook