Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco ios xe 17.4.1 vulnerabilities and exploits

(subscribe to this query)
9
CVSSv2
CVE-2022-20693
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote malicious user to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability b...
Cisco Ios Xe 16.12.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.12.1cCisco Ios Xe 16.12.1tCisco Ios Xe 16.12.1sCisco Ios Xe 16.12.1aCisco Ios Xe 16.12.1xCisco Ios Xe 16.12.1wCisco Ios Xe 16.12.1yCisco Ios Xe 16.12.2Cisco Ios Xe 16.12.2aCisco Ios Xe 16.12.4Cisco Ios Xe 16.12.3Cisco Ios Xe 17.2.1Cisco Ios Xe 17.4.1Cisco Ios Xe 17.1.1sCisco Ios Xe 16.12.2tCisco Ios Xe 17.1.1aCisco Ios Xe 16.12.2sCisco Ios Xe 16.12.3aCisco Ios Xe 17.1.1tCisco Ios Xe 17.2.1a
7.2
CVSSv2
CVE-2022-20676
A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS XE Software could allow an authenticated, local malicious user to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is pass...
Cisco Ios Xe 17.2.1Cisco Ios Xe 17.4.1Cisco Ios Xe 17.2.1aCisco Ios Xe 17.2.1vCisco Ios Xe 17.2.1rCisco Ios Xe 17.2.2Cisco Ios Xe 17.3.1Cisco Ios Xe 17.4.1aCisco Ios Xe 17.3.2Cisco Ios Xe 17.4.1bCisco Ios Xe 17.3.1aCisco Ios Xe 17.3.2aCisco Ios Xe 17.3.1wCisco Ios Xe 17.2.3Cisco Ios Xe 17.3.1xCisco Ios Xe 17.5.1Cisco Ios Xe 16.12.1z2Cisco Ios Xe 17.3.1zCisco Ios Xe 17.3.3Cisco Ios Xe 17.3.3aCisco Ios Xe 17.4.1cCisco Ios Xe 17.5.1a
7.2
CVSSv2
CVE-2021-1453
A vulnerability in the software image verification functionality of Cisco IOS XE Software for the Cisco Catalyst 9000 Family of switches could allow an unauthenticated, physical malicious user to execute unsigned code at system boot time. The vulnerability is due to an improper c...
Cisco Ios Xe 16.6.1Cisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1sCisco Ios Xe 16.9.1sCisco Ios Xe 16.6.4sCisco Ios Xe 16.6.4Cisco Ios Xe 16.10.1Cisco Ios Xe 16.9.2Cisco Ios Xe 16.6.4aCisco Ios Xe 16.12.1Cisco Ios Xe 16.6.5Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.12.1cCisco Ios Xe 16.11.2Cisco Ios Xe 16.12.1sCisco Ios Xe 16.11.1c
7.2
CVSSv2
CVE-2022-20681
A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local malicious user to elevate privileges to level 15 on an affected device. This vulnerability is due to...
Cisco Ios Xe 16.12.1Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.11.1aCisco Ios Xe 16.12.1cCisco Ios Xe 16.12.1tCisco Ios Xe 16.11.2Cisco Ios Xe 16.12.1sCisco Ios Xe 16.12.1aCisco Ios Xe 16.12.1xCisco Ios Xe 16.11.1cCisco Ios Xe 16.11.1bCisco Ios Xe 16.11.1sCisco Ios Xe 16.12.1wCisco Ios Xe 16.12.1yCisco Ios Xe 16.12.2Cisco Ios Xe 16.12.2aCisco Ios Xe 16.12.4Cisco Ios Xe 16.12.3Cisco Ios Xe 17.2.1Cisco Ios Xe 17.4.1Cisco Ios Xe 17.1.1s
7.2
CVSSv2
CVE-2021-1383
Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local malicious user to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attack...
Cisco Ios Xe 16.9.1Cisco Ios Xe 16.10.1Cisco Ios Xe 16.9.2Cisco Ios Xe 16.12.1Cisco Ios Xe 16.11.1Cisco Ios Xe 17.1.1Cisco Ios Xe 16.11.1aCisco Ios Xe 16.12.1cCisco Ios Xe 16.12.1tCisco Ios Xe 16.11.2Cisco Ios Xe 16.12.1sCisco Ios Xe 16.12.1aCisco Ios Xe 16.12.1xCisco Ios Xe 16.11.1cCisco Ios Xe 16.11.1bCisco Ios Xe 16.11.1sCisco Ios Xe 16.12.1wCisco Ios Xe 16.10.1sCisco Ios Xe 16.10.1dCisco Ios Xe 16.10.1aCisco Ios Xe 16.10.1fCisco Ios Xe 16.10.1g
9
CVSSv2
CVE-2022-20719
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an malicious user to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install appl...
Cisco Ios Xe 16.6.1Cisco Ios Xe 16.4.1Cisco Ios Xe 16.3.1Cisco Ios Xe 16.3.1aCisco Ios Xe 16.3.2Cisco Ios Xe 16.3.3Cisco Ios Xe 16.5.1Cisco Ios Xe 16.5.1aCisco Ios Xe 16.3.4Cisco Ios Xe 16.5.1bCisco Ios Xe 16.4.2Cisco Ios Xe 16.3.5bCisco Ios Xe 16.3.6Cisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.3.5Cisco Ios Xe 16.5.2Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1s
9
CVSSv2
CVE-2022-20720
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an malicious user to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install appl...
Cisco Ios Xe 16.6.1Cisco Ios Xe 16.4.1Cisco Ios Xe 16.3.1Cisco Ios Xe 16.3.1aCisco Ios Xe 16.3.2Cisco Ios Xe 16.3.3Cisco Ios Xe 16.5.1Cisco Ios Xe 16.5.1aCisco Ios Xe 16.3.4Cisco Ios Xe 16.5.1bCisco Ios Xe 16.4.2Cisco Ios Xe 16.3.5bCisco Ios Xe 16.3.6Cisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.3.5Cisco Ios Xe 16.5.2Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1s
6.8
CVSSv2
CVE-2022-20721
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an malicious user to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install appl...
Cisco Ios Xe 16.6.1Cisco Ios Xe 16.4.1Cisco Ios Xe 16.3.1Cisco Ios Xe 16.3.1aCisco Ios Xe 16.3.2Cisco Ios Xe 16.3.3Cisco Ios Xe 16.5.1Cisco Ios Xe 16.5.1aCisco Ios Xe 16.3.4Cisco Ios Xe 16.5.1bCisco Ios Xe 16.4.2Cisco Ios Xe 16.3.5bCisco Ios Xe 16.3.6Cisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.3.5Cisco Ios Xe 16.5.2Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1s
6.8
CVSSv2
CVE-2022-20722
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an malicious user to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install appl...
Cisco Ios Xe 16.6.1Cisco Ios Xe 16.4.1Cisco Ios Xe 16.3.1Cisco Ios Xe 16.3.1aCisco Ios Xe 16.3.2Cisco Ios Xe 16.3.3Cisco Ios Xe 16.5.1Cisco Ios Xe 16.5.1aCisco Ios Xe 16.3.4Cisco Ios Xe 16.5.1bCisco Ios Xe 16.4.2Cisco Ios Xe 16.3.5bCisco Ios Xe 16.3.6Cisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.3.5Cisco Ios Xe 16.5.2Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1s
9
CVSSv2
CVE-2022-20723
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an malicious user to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install appl...
Cisco Ios Xe 16.6.1Cisco Ios Xe 16.4.1Cisco Ios Xe 16.3.1Cisco Ios Xe 16.3.1aCisco Ios Xe 16.3.2Cisco Ios Xe 16.3.3Cisco Ios Xe 16.5.1Cisco Ios Xe 16.5.1aCisco Ios Xe 16.3.4Cisco Ios Xe 16.5.1bCisco Ios Xe 16.4.2Cisco Ios Xe 16.3.5bCisco Ios Xe 16.3.6Cisco Ios Xe 16.6.3Cisco Ios Xe 16.8.1Cisco Ios Xe 16.7.1Cisco Ios Xe 16.6.2Cisco Ios Xe 16.9.1Cisco Ios Xe 16.3.5Cisco Ios Xe 16.5.2Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1s
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook