Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco ios xe 3.5.0sq vulnerabilities and exploits

(subscribe to this query)
6.9
CVSSv2
CVE-2017-6606
A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on the underlying operating system with the privileges of the root user. More Information: CSCuz06639 CSC...
Cisco Ios Xe 3.3.2sCisco Ios Xe 3.6.5eCisco Ios Xe 3.11.0sCisco Ios Xe 3.4.0sCisco Ios Xe 3.5.0eCisco Ios Xe 3.4.0asCisco Ios Xe 3.12.1sCisco Ios Xe 3.15.3sCisco Ios Xe 3.8.0sCisco Ios Xe 3.4.2sgCisco Ios Xe 3.1.2sCisco Ios Xe 3.5.1eCisco Ios Xe 3.14.2sCisco Ios Xe 3.3.4seCisco Ios Xe 3.18.0asCisco Ios Xe 3.16.0csCisco Ios Xe 3.7.0bsCisco Ios Xe 3.5.3eCisco Ios Xe 3.5.0sqCisco Ios Xe 3.2.5sgCisco Ios Xe 3.2.2sgCisco Ios Xe 3.3.1xo
7.8
CVSSv2
CVE-2017-3856
A vulnerability in the web user interface of Cisco IOS XE 3.1 up to and including 3.17 could allow an unauthenticated, remote malicious user to cause an affected device to reload. The vulnerability is due to insufficient resource handling by the affected software when the web use...
Cisco Ios Xe 3.1.3asCisco Ios Xe 3.1.4sCisco Ios Xe 3.10.3sCisco Ios Xe 3.10.4sCisco Ios Xe 3.11.1sCisco Ios Xe 3.11.2sCisco Ios Xe 3.11.3sCisco Ios Xe 3.12.3sCisco Ios Xe 3.12.4sCisco Ios Xe 3.13.3sCisco Ios Xe 3.13.4sCisco Ios Xe 3.15.0sCisco Ios Xe 3.15.1sCisco Ios Xe 3.16.1sCisco Ios Xe 3.16.1asCisco Ios Xe 3.17sCisco Ios Xe 3.1sCisco Ios Xe 3.2.1seCisco Ios Xe 3.2.1sgCisco Ios Xe 3.2.4sgCisco Ios Xe 3.2.5sgCisco Ios Xe 3.2se
7.2
CVSSv2
CVE-2020-3209
A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical malicious user to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an improper check on the ...
Cisco Ios Xe 3.2.0seCisco Ios Xe 3.2.0sgCisco Ios Xe 3.2.1seCisco Ios Xe 3.2.1sgCisco Ios Xe 3.2.2seCisco Ios Xe 3.2.2sgCisco Ios Xe 3.2.3seCisco Ios Xe 3.2.3sgCisco Ios Xe 3.2.4sgCisco Ios Xe 3.2.5sgCisco Ios Xe 3.2.6sgCisco Ios Xe 3.2.7sgCisco Ios Xe 3.2.8sgCisco Ios Xe 3.2.9sgCisco Ios Xe 3.2.10sgCisco Ios Xe 3.2.11sgCisco Ios Xe 3.3.0seCisco Ios Xe 3.3.0sgCisco Ios Xe 3.3.0sqCisco Ios Xe 3.3.0xoCisco Ios Xe 3.3.1seCisco Ios Xe 3.3.1sg
5
CVSSv2
CVE-2016-1384
The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 up to and including 3.17 allows remote malicious users to modify the system time via crafted packets, aka Bug ID CSCux46898.
Cisco Ios 15.5\\(1\\)s4Cisco Ios 15.5\\(3\\)snCisco Ios 15.5\\(2\\)s2Cisco Ios 15.5\\(2\\)s1Cisco Ios 15.5\\(2\\)sCisco Ios 15.5\\(1\\)sCisco Ios 15.1\\(3\\)s1Cisco Ios 15.1\\(2\\)s2Cisco Ios 15.5\\(3\\)m0aCisco Ios 15.5\\(3\\)m1Cisco Ios 15.5\\(1\\)s1Cisco Ios 15.5\\(3\\)mCisco Ios 15.1\\(3\\)s2Cisco Ios 15.1\\(3\\)s0aCisco Ios 15.1\\(1\\)sCisco Ios 15.1\\(2\\)sCisco Ios 15.5\\(3\\)s1aCisco Ios 15.5\\(3\\)s1Cisco Ios 15.5\\(2\\)tCisco Ios 15.5\\(3\\)sCisco Ios 15.1\\(3\\)s5Cisco Ios 15.1\\(3\\)s3
7.8
CVSSv2
CVE-2016-6386
Cisco IOS XE 3.1 up to and including 3.17 and 16.1 on 64-bit platforms allows remote malicious users to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets, aka Bug ID CSCux66005.
Cisco Ios Xe 3.9.0sCisco Ios Xe 3.12.4sCisco Ios Xe 3.6.2sCisco Ios Xe 3.4.2sCisco Ios Xe 3.7.4sCisco Ios Xe 3.7.2eCisco Ios Xe 3.12.1sCisco Ios Xe 3.16.1asCisco Ios Xe 3.3.5seCisco Ios Xe 3.10.5sCisco Ios Xe 3.2.1seCisco Ios Xe 3.9.0asCisco Ios Xe 3.3sg 3.3.2sgCisco Ios Xe 3.3xo 3.3.2xoCisco Ios Xe 3.1.4asCisco Ios Xe 3.4.1sCisco Ios Xe 3.3.3seCisco Ios Xe 3.6.2eCisco Ios Xe 3.13.4sCisco Ios Xe 3.7.5sCisco Ios Xe 3.1.0sCisco Ios Xe 3.3sg 3.3.1sg
7.2
CVSSv2
CVE-2020-3204
A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC credentials to execute arbitrary code on the underlying operating system (OS) with root privileges. The...
Cisco Ios 12.2\\(6\\)i1Cisco Ios 12.2\\(33\\)sreCisco Ios 12.2\\(33\\)sre0aCisco Ios 12.2\\(33\\)sre1Cisco Ios 12.2\\(33\\)sre2Cisco Ios 12.2\\(33\\)sre3Cisco Ios 12.2\\(33\\)sre4Cisco Ios 12.2\\(33\\)sre5Cisco Ios 12.2\\(33\\)sre6Cisco Ios 12.2\\(33\\)sre7Cisco Ios 12.2\\(33\\)sre7aCisco Ios 12.2\\(33\\)sre8Cisco Ios 12.2\\(33\\)sre9Cisco Ios 12.2\\(33\\)sre9aCisco Ios 12.2\\(33\\)sre10Cisco Ios 12.2\\(33\\)sre11Cisco Ios 12.2\\(33\\)sre12Cisco Ios 12.2\\(33\\)sre13Cisco Ios 12.2\\(33\\)sre14Cisco Ios 12.2\\(33\\)sre15Cisco Ios 12.2\\(33\\)sre15aCisco Ios 12.2\\(33\\)sxi
3.3
CVSSv2
CVE-2019-1761
A vulnerability in the Hot Standby Router Protocol (HSRP) subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent malicious user to receive potentially sensitive information from an affected device. The vulnerability is due to insufficient memory initi...
Cisco Ios 12.4\\(15\\)xy4Cisco Ios 12.2\\(33\\)sxj10Cisco Ios 15.5\\(3\\)m6aCisco Ios 12.4\\(6\\)t12Cisco Ios 12.2\\(33\\)sccCisco Ios 15.3\\(3\\)ja1mCisco Ios 15.4\\(2\\)sn1Cisco Ios 15.1\\(3\\)svg3dCisco Ios 15.2\\(3\\)e1Cisco Ios 12.2\\(50\\)sq6Cisco Ios 12.2\\(33\\)srb6Cisco Ios Xe 16.9.1dCisco Ios 15.1\\(1\\)s2Cisco Ios 15.0\\(2\\)ey1Cisco Ios 15.1\\(3\\)svo4Cisco Ios 12.4\\(15\\)xy5Cisco Ios 12.2\\(33\\)sb3Cisco Ios 15.0\\(2a\\)ex5Cisco Ios Xe 3.18.2spCisco Ios 15.1\\(2\\)t1Cisco Ios 12.4\\(4\\)xc6Cisco Ios 15.4\\(2\\)s1
6.1
CVSSv2
CVE-2019-1746
A vulnerability in the Cluster Management Protocol (CMP) processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent malicious user to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to insuf...
Cisco Ios 12.2\\(25\\)ewa9Cisco Ios 12.2\\(40\\)sgCisco Ios 12.2\\(18\\)sCisco Ios 15.0\\(2\\)ej1Cisco Ios Xe 3.9.0eCisco Ios 12.2\\(20\\)s4aCisco Ios 12.2\\(20\\)euCisco Ios Xe 3.10.0ceCisco Ios 12.2\\(25\\)seb4Cisco Ios Xe 3.2.4sgCisco Ios 12.1\\(9\\)ea1cCisco Ios 12.2\\(50\\)sq6Cisco Ios 12.2\\(60\\)ez4Cisco Ios 15.2\\(4\\)e1Cisco Ios 12.2\\(14\\)sz2Cisco Ios 15.1\\(3\\)svo2Cisco Ios Xe 3.5.4sqCisco Ios 12.2\\(18\\)s3Cisco Ios 15.2\\(6\\)e1Cisco Ios Xe 3.8.3eCisco Ios 12.2\\(50\\)sq5Cisco Ios 12.2\\(44\\)sg
4.9
CVSSv2
CVE-2020-3201
A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC credentials to cause a denial of service (DoS) condition on an affected system. The vulnerability is du...
Cisco Ios 12.2\\(18\\)ixaCisco Ios 12.2\\(18\\)ixbCisco Ios 12.2\\(18\\)ixb1Cisco Ios 12.2\\(18\\)ixb2Cisco Ios 12.2\\(18\\)ixcCisco Ios 12.2\\(18\\)ixdCisco Ios 12.2\\(18\\)ixd1Cisco Ios 12.2\\(18\\)ixeCisco Ios 12.2\\(18\\)ixfCisco Ios 12.2\\(18\\)ixf1Cisco Ios 12.2\\(18\\)ixgCisco Ios 12.2\\(18\\)ixhCisco Ios 12.2\\(18\\)ixh1Cisco Ios 12.2\\(18\\)sxeCisco Ios 12.2\\(18\\)sxe1Cisco Ios 12.2\\(18\\)sxe2Cisco Ios 12.2\\(18\\)sxe3Cisco Ios 12.2\\(18\\)sxe4Cisco Ios 12.2\\(18\\)sxe5Cisco Ios 12.2\\(18\\)sxe6Cisco Ios 12.2\\(18\\)sxe6aCisco Ios 12.2\\(18\\)sxe6b
3.3
CVSSv2
CVE-2018-0197
A vulnerability in the VLAN Trunking Protocol (VTP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent malicious user to corrupt the internal VTP database on an affected device and cause a denial of service (DoS) condition. The vuln...
Cisco Ios 12.2\\(33\\)srb5Cisco Ios 15.0\\(2\\)mrCisco Ios 12.2\\(20\\)se2Cisco Ios 12.2\\(18\\)ew3Cisco Ios 15.1\\(1\\)s1Cisco Ios Xe 3.15.3sCisco Ios Xe 3.8.5eCisco Ios Xe 3.6.2eCisco Ios Xe 3.9.0eCisco Ios 12.2\\(33\\)srd4Cisco Ios 12.2\\(50\\)sq6Cisco Ios 12.1\\(8b\\)e10Cisco Ios 12.2\\(52\\)se1Cisco Ios 15.1\\(3\\)svo2Cisco Ios 12.2\\(50\\)sq7Cisco Ios 12.2\\(53\\)sg4Cisco Ios 12.2\\(11\\)yz2Cisco Ios 15.0\\(2\\)sg6Cisco Ios 12.2\\(53\\)sg3Cisco Ios 12.2\\(18\\)zy1Cisco Ios 12.2\\(33\\)srcCisco Ios 15.1\\(3\\)s2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook