Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco ios xe 16.3.11 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv3
CVE-2023-20198
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previou...
Cisco Ios Xe
9.1
CVSSv3
CVE-2023-20186
A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote malicious user to bypass command authorization and copy files to or from the file system of an affected device u...
Cisco Ios 15.2\\(4\\)eaCisco Ios 15.4\\(2\\)s2Cisco Ios 15.0\\(2\\)ex4Cisco Ios 15.1\\(3\\)s4Cisco Ios 15.3\\(2\\)s1Cisco Ios 15.1\\(1\\)sCisco Ios 15.1\\(2\\)sy10Cisco Ios 15.5\\(1\\)t1Cisco Ios 15.4\\(2\\)s4Cisco Ios 15.2\\(2\\)e5bCisco Ios 15.0\\(1\\)eyCisco Ios 15.0\\(1\\)xaCisco Ios 15.3\\(2\\)sCisco Ios 12.2\\(60\\)ez7Cisco Ios 12.2\\(58\\)exCisco Ios 15.2\\(2\\)syCisco Ios 15.6\\(2\\)sp2Cisco Ios 15.6\\(2\\)t3Cisco Ios 15.1\\(3\\)mra1Cisco Ios 15.6\\(1\\)t2Cisco Ios 15.2\\(3\\)e2Cisco Ios 15.1\\(2\\)sg4
9.1
CVSSv3
CVE-2021-1619
A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow an unauthenticated, remote malicious user to bypass NETCONF or RESTCONF authentication and do either of the following: Install, manipulate, or delete the confi...
Cisco Ios Xe 16.6.1Cisco Ios Xe 16.4.1Cisco Ios Xe 16.3.1Cisco Ios Xe 16.3.1aCisco Ios Xe 16.3.2Cisco Ios Xe 16.3.3Cisco Ios Xe 16.5.1Cisco Ios Xe 16.5.1aCisco Ios Xe 16.3.4Cisco Ios Xe 16.5.1bCisco Ios Xe 16.4.2Cisco Ios Xe 16.3.5bCisco Ios Xe 16.3.6Cisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.3.5Cisco Ios Xe 16.5.2Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1s
8.8
CVSSv3
CVE-2020-3400
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote malicious user to utilize parts of the web UI for which they are not authorized.The vulnerability is due to insufficient authorization of web UI access requests. An attacker could ...
Cisco Ios Xe 16.2.2Cisco Ios Xe 16.3.1Cisco Ios Xe 16.3.1aCisco Ios Xe 16.3.2Cisco Ios Xe 16.3.3Cisco Ios Xe 16.3.4Cisco Ios Xe 16.3.5Cisco Ios Xe 16.3.5bCisco Ios Xe 16.3.6Cisco Ios Xe 16.3.7Cisco Ios Xe 16.3.8Cisco Ios Xe 16.3.9Cisco Ios Xe 16.3.10Cisco Ios Xe 16.3.11Cisco Ios Xe 17.2.1t
8.6
CVSSv3
CVE-2023-20033
A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote malicious user to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due...
Cisco Ios Xe 16.3.1Cisco Ios Xe 16.3.1aCisco Ios Xe 16.3.2Cisco Ios Xe 16.3.3Cisco Ios Xe 16.3.4Cisco Ios Xe 16.3.5Cisco Ios Xe 16.3.5bCisco Ios Xe 16.3.6Cisco Ios Xe 16.3.7Cisco Ios Xe 16.3.8Cisco Ios Xe 16.3.9Cisco Ios Xe 16.3.10Cisco Ios Xe 16.3.11Cisco Ios Xe 16.4.1Cisco Ios Xe 16.5.1Cisco Ios Xe 16.5.1aCisco Ios Xe 16.6.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.6.3Cisco Ios Xe 16.6.4Cisco Ios Xe 16.6.4aCisco Ios Xe 16.6.5
8.6
CVSSv3
CVE-2023-20027
A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to imprope...
Cisco Ios Xe 3.9.0asCisco Ios Xe 3.9.1sCisco Ios Xe 3.9.2sCisco Ios Xe 3.10.0sCisco Ios Xe 3.10.1sCisco Ios Xe 3.10.2asCisco Ios Xe 3.10.2sCisco Ios Xe 3.10.2tsCisco Ios Xe 3.10.3sCisco Ios Xe 3.10.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.6sCisco Ios Xe 3.10.7sCisco Ios Xe 3.10.8asCisco Ios Xe 3.10.8sCisco Ios Xe 3.10.9sCisco Ios Xe 3.10.10sCisco Ios Xe 3.11.0sCisco Ios Xe 3.11.1sCisco Ios Xe 3.11.2sCisco Ios Xe 3.11.3sCisco Ios Xe 3.11.4s
7.8
CVSSv3
CVE-2021-1442
A vulnerability in a diagnostic command for the Plug-and-Play (PnP) subsystem of Cisco IOS XE Software could allow an authenticated, local malicious user to elevate privileges to the level of an Administrator user (level 15) on an affected device. The vulnerability is due to insu...
Cisco Ios Xe 3.6.3eCisco Ios Xe 3.6.4eCisco Ios Xe 3.6.5aeCisco Ios Xe 3.6.5beCisco Ios Xe 3.6.5eCisco Ios Xe 3.6.6eCisco Ios Xe 3.6.7aeCisco Ios Xe 3.6.7beCisco Ios Xe 3.6.7eCisco Ios Xe 3.6.8eCisco Ios Xe 3.6.9aeCisco Ios Xe 3.6.9eCisco Ios Xe 3.6.10eCisco Ios Xe 3.7.3eCisco Ios Xe 3.7.4eCisco Ios Xe 3.7.5eCisco Ios Xe 3.8.0eCisco Ios Xe 3.8.1eCisco Ios Xe 3.8.2eCisco Ios Xe 3.8.3eCisco Ios Xe 3.8.4eCisco Ios Xe 3.8.5ae
7.7
CVSSv3
CVE-2022-20920
A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote malicious user to cause an affected device to reload. This vulnerability is due to improper handling of resources during an exceptional situation. An att...
Cisco Ios 15.2\\(4\\)eaCisco Ios 15.4\\(2\\)s2Cisco Ios 15.3\\(3\\)jnb3Cisco Ios 3.5.3eCisco Ios 15.0\\(2\\)ex4Cisco Ios 15.1\\(3\\)s4Cisco Ios 15.3\\(2\\)s1Cisco Ios 15.1\\(1\\)sCisco Ios 15.1\\(2\\)sy10Cisco Ios 12.4\\(22\\)mda6Cisco Ios 15.5\\(1\\)t1Cisco Ios 15.4\\(2\\)s4Cisco Ios 15.2\\(2\\)e5bCisco Ios 15.0\\(1\\)eyCisco Ios 15.3\\(3\\)jnCisco Ios 15.0\\(1\\)xaCisco Ios 15.3\\(2\\)sCisco Ios 15.3\\(3\\)jbCisco Ios 12.2\\(60\\)ez7Cisco Ios 12.2\\(58\\)exCisco Ios 15.3\\(3\\)jnb2Cisco Ios 15.2\\(2\\)sy
7.7
CVSSv3
CVE-2021-1620
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote malicious user to exhaust the free IP addresses from the assigned local pool. This vulnerabili...
Cisco Ios 12.2\\(6\\)i1Cisco Ios 15.1\\(3\\)svr1Cisco Ios 15.1\\(3\\)svr2Cisco Ios 15.1\\(3\\)svr3Cisco Ios 15.1\\(3\\)svsCisco Ios 15.1\\(3\\)svs1Cisco Ios 15.1\\(3\\)svt1Cisco Ios 15.1\\(3\\)svt2Cisco Ios 15.1\\(3\\)svu1Cisco Ios 15.2\\(1\\)sy2Cisco Ios 15.2\\(1\\)sy3Cisco Ios 15.2\\(1\\)sy4Cisco Ios 15.2\\(1\\)sy5Cisco Ios 15.2\\(1\\)sy6Cisco Ios 15.2\\(1\\)sy7Cisco Ios 15.2\\(1\\)sy8Cisco Ios 15.2\\(4\\)eCisco Ios 15.2\\(4\\)e1Cisco Ios 15.2\\(4\\)e2Cisco Ios 15.2\\(4\\)e3Cisco Ios 15.2\\(4\\)e4Cisco Ios 15.2\\(4\\)e5
7.7
CVSSv3
CVE-2021-34699
A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote malicious user to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker cou...
Cisco Ios 15.2\\(4\\)eaCisco Ios 15.4\\(2\\)s2Cisco Ios Xe 3.13.2sCisco Ios 15.0\\(2\\)ex4Cisco Ios 15.1\\(2\\)sy10Cisco Ios Xe 3.6.5beCisco Ios Xe 3.13.6sCisco Ios 15.5\\(1\\)t1Cisco Ios 15.4\\(2\\)s4Cisco Ios 15.2\\(2\\)e5bCisco Ios Xe 3.14.4sCisco Ios 15.0\\(1\\)sy1Cisco Ios 15.2\\(2\\)syCisco Ios 15.6\\(2\\)sp2Cisco Ios Xe 3.7.4eCisco Ios Xe 3.15.1csCisco Ios 15.6\\(2\\)t3Cisco Ios Xe 3.9.0eCisco Ios 15.6\\(1\\)t2Cisco Ios 15.2\\(3\\)e2Cisco Ios Xe 3.13.4sCisco Ios 15.5\\(3\\)s1a
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671unauthorizedCVE-2024-4776CVE-2024-3407CVE-2024-26026CVE-2024-32888wirelessCVE-2024-4656template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook