Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco ios xe 17.1.2 vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv3
CVE-2022-20693
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote malicious user to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability b...
Cisco Ios Xe 16.12.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.12.1cCisco Ios Xe 16.12.1tCisco Ios Xe 16.12.1sCisco Ios Xe 16.12.1aCisco Ios Xe 16.12.1xCisco Ios Xe 16.12.1wCisco Ios Xe 16.12.1yCisco Ios Xe 16.12.2Cisco Ios Xe 16.12.2aCisco Ios Xe 16.12.4Cisco Ios Xe 16.12.3Cisco Ios Xe 17.2.1Cisco Ios Xe 17.4.1Cisco Ios Xe 17.1.1sCisco Ios Xe 16.12.2tCisco Ios Xe 17.1.1aCisco Ios Xe 16.12.2sCisco Ios Xe 16.12.3aCisco Ios Xe 17.1.1tCisco Ios Xe 17.2.1a
6.1
CVSSv3
CVE-2021-1381
A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. A...
Cisco Ios Xe 16.12.1Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.11.1aCisco Ios Xe 16.12.1cCisco Ios Xe 16.12.1tCisco Ios Xe 16.11.2Cisco Ios Xe 16.12.1sCisco Ios Xe 16.12.1aCisco Ios Xe 16.12.1xCisco Ios Xe 16.11.1cCisco Ios Xe 16.11.1bCisco Ios Xe 16.11.1sCisco Ios Xe 16.12.1wCisco Ios Xe 16.12.1yCisco Ios Xe 16.12.2Cisco Ios Xe 16.12.2aCisco Ios Xe 16.12.4Cisco Ios Xe 16.12.3Cisco Ios Xe 17.2.1Cisco Ios Xe 17.1.1sCisco Ios Xe 16.12.2t
6.7
CVSSv3
CVE-2021-1376
Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could allow an authenticated, local malicious user to either execute arbitrary code on the underlying operati...
Cisco Ios Xe 16.5.1Cisco Ios Xe 16.5.1aCisco Ios Xe 16.6.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.6.3Cisco Ios Xe 16.6.4Cisco Ios Xe 16.6.4aCisco Ios Xe 16.6.4sCisco Ios Xe 16.6.5Cisco Ios Xe 16.6.6Cisco Ios Xe 16.6.7Cisco Ios Xe 16.6.8Cisco Ios Xe 16.8.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.9.1Cisco Ios Xe 16.9.1sCisco Ios Xe 16.9.2Cisco Ios Xe 16.9.2sCisco Ios Xe 16.9.3Cisco Ios Xe 16.9.3aCisco Ios Xe 16.9.3s
6.7
CVSSv3
CVE-2021-1390
A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local malicious user to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker would need to have valid user credentials at privile...
Cisco Ios Xe 16.8.1Cisco Ios Xe 16.9.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.8.1bCisco Ios Xe 16.8.2Cisco Ios Xe 16.8.1dCisco Ios Xe 16.8.1cCisco Ios Xe 16.8.1eCisco Ios Xe 16.9.1sCisco Ios Xe 16.9.1cCisco Ios Xe 16.9.1bCisco Ios Xe 16.9.1dCisco Ios Xe 16.10.1Cisco Ios Xe 16.9.1aCisco Ios Xe 16.9.2aCisco Ios Xe 16.9.2Cisco Ios Xe 16.12.1Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.11.1aCisco Ios Xe 16.12.1c
6.8
CVSSv3
CVE-2021-1453
A vulnerability in the software image verification functionality of Cisco IOS XE Software for the Cisco Catalyst 9000 Family of switches could allow an unauthenticated, physical malicious user to execute unsigned code at system boot time. The vulnerability is due to an improper c...
Cisco Ios Xe 16.6.1Cisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.9.1sCisco Ios Xe 16.6.4sCisco Ios Xe 16.6.4Cisco Ios Xe 16.10.1Cisco Ios Xe 16.9.2Cisco Ios Xe 16.6.4aCisco Ios Xe 16.12.1Cisco Ios Xe 16.6.5Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.12.1cCisco Ios Xe 16.11.2Cisco Ios Xe 16.12.1sCisco Ios Xe 16.11.1c
4.8
CVSSv3
CVE-2021-1374
A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against another user of the web-based man...
Cisco Ios Xe 16.6.1Cisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.8.1bCisco Ios Xe 16.8.2Cisco Ios Xe 16.7.2Cisco Ios Xe 16.8.1dCisco Ios Xe 16.7.3Cisco Ios Xe 16.7.1aCisco Ios Xe 16.7.1bCisco Ios Xe 16.8.1cCisco Ios Xe 16.8.1eCisco Ios Xe 16.9.1sCisco Ios Xe 16.9.1cCisco Ios Xe 16.9.1bCisco Ios Xe 16.9.1dCisco Ios Xe 16.6.4s
7.8
CVSSv3
CVE-2022-20681
A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local malicious user to elevate privileges to level 15 on an affected device. This vulnerability is due to...
Cisco Ios Xe 16.12.1Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.11.1aCisco Ios Xe 16.12.1cCisco Ios Xe 16.12.1tCisco Ios Xe 16.11.2Cisco Ios Xe 16.12.1sCisco Ios Xe 16.12.1aCisco Ios Xe 16.12.1xCisco Ios Xe 16.11.1cCisco Ios Xe 16.11.1bCisco Ios Xe 16.11.1sCisco Ios Xe 16.12.1wCisco Ios Xe 16.12.1yCisco Ios Xe 16.12.2Cisco Ios Xe 16.12.2aCisco Ios Xe 16.12.4Cisco Ios Xe 16.12.3Cisco Ios Xe 17.2.1Cisco Ios Xe 17.4.1Cisco Ios Xe 17.1.1s
7.8
CVSSv3
CVE-2021-1442
A vulnerability in a diagnostic command for the Plug-and-Play (PnP) subsystem of Cisco IOS XE Software could allow an authenticated, local malicious user to elevate privileges to the level of an Administrator user (level 15) on an affected device. The vulnerability is due to insu...
Cisco Ios Xe 3.6.3eCisco Ios Xe 3.6.4eCisco Ios Xe 3.6.5aeCisco Ios Xe 3.6.5beCisco Ios Xe 3.6.5eCisco Ios Xe 3.6.6eCisco Ios Xe 3.6.7aeCisco Ios Xe 3.6.7beCisco Ios Xe 3.6.7eCisco Ios Xe 3.6.8eCisco Ios Xe 3.6.9aeCisco Ios Xe 3.6.9eCisco Ios Xe 3.6.10eCisco Ios Xe 3.7.3eCisco Ios Xe 3.7.4eCisco Ios Xe 3.7.5eCisco Ios Xe 3.8.0eCisco Ios Xe 3.8.1eCisco Ios Xe 3.8.2eCisco Ios Xe 3.8.3eCisco Ios Xe 3.8.4eCisco Ios Xe 3.8.5ae
6.8
CVSSv3
CVE-2021-1398
A vulnerability in the boot logic of Cisco IOS XE Software could allow an authenticated, local attacker with level 15 privileges or an unauthenticated attacker with physical access to execute arbitrary code on the underlying Linux operating system of an affected device. This vuln...
Cisco Ios Xe 3.13.2sCisco Ios Xe 3.10.6sCisco Ios Xe 3.13.6sCisco Ios Xe 3.14.4sCisco Ios Xe 3.7.2tsCisco Ios Xe 3.15.1csCisco Ios Xe 3.13.4sCisco Ios Xe 16.2.1Cisco Ios Xe 16.1.3Cisco Ios Xe 3.13.0sCisco Ios Xe 3.18.2sCisco Ios Xe 16.1.2Cisco Ios Xe 3.8.0sCisco Ios Xe 3.17.3sCisco Ios Xe 3.16.0sCisco Ios Xe 3.8.1sCisco Ios Xe 3.14.1sCisco Ios Xe 3.7.1sCisco Ios Xe 3.12.2sCisco Ios Xe 3.16.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.8s
6.5
CVSSv3
CVE-2022-20692
A vulnerability in the NETCONF over SSH feature of Cisco IOS XE Software could allow a low-privileged, authenticated, remote malicious user to cause a denial of service condition (DoS) on an affected device. This vulnerability is due to insufficient resource management. An attack...
Cisco Ios Xe 16.6.1Cisco Ios Xe 16.4.1Cisco Ios Xe 16.3.1Cisco Ios Xe 16.3.1aCisco Ios Xe 16.3.2Cisco Ios Xe 16.3.3Cisco Ios Xe 16.5.1Cisco Ios Xe 16.5.1aCisco Ios Xe 16.3.4Cisco Ios Xe 16.5.1bCisco Ios Xe 16.4.2Cisco Ios Xe 16.3.5bCisco Ios Xe 16.3.6Cisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.3.5Cisco Ios Xe 16.5.2Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1s
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946CVE-2024-30309CVE-2024-4761CVE-2024-30051type confusionmemory leakCVE-2024-30293reflected XSSCVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook