Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco ios xe 3.7.0s vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-6692
Cisco IOS XE 3.8S(.2) and previous versions does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service (device reload) via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949.
Cisco Ios Xe 3.8s\\(.0\\)Cisco Ios Xe 3.7.0sCisco Ios Xe 3.7.1sCisco Ios Xe 3.7.2sCisco Ios Xe 3.8s\\(.1\\)Cisco Ios Xe 3.8.0sCisco Ios Xe
6.4
CVSSv3
CVE-2017-6606
A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on the underlying operating system with the privileges of the root user. More Information: CSCuz06639 CSC...
Cisco Ios Xe 3.3.2sCisco Ios Xe 3.6.5eCisco Ios Xe 3.11.0sCisco Ios Xe 3.4.0sCisco Ios Xe 3.5.0eCisco Ios Xe 3.4.0asCisco Ios Xe 3.12.1sCisco Ios Xe 3.15.3sCisco Ios Xe 3.8.0sCisco Ios Xe 3.4.2sgCisco Ios Xe 3.1.2sCisco Ios Xe 3.5.1eCisco Ios Xe 3.14.2sCisco Ios Xe 3.3.4seCisco Ios Xe 3.18.0asCisco Ios Xe 3.16.0csCisco Ios Xe 3.7.0bsCisco Ios Xe 3.5.3eCisco Ios Xe 3.5.0sqCisco Ios Xe 3.2.5sgCisco Ios Xe 3.2.2sgCisco Ios Xe 3.3.1xo
7.5
CVSSv3
CVE-2017-3856
A vulnerability in the web user interface of Cisco IOS XE 3.1 up to and including 3.17 could allow an unauthenticated, remote malicious user to cause an affected device to reload. The vulnerability is due to insufficient resource handling by the affected software when the web use...
Cisco Ios Xe 3.1.3asCisco Ios Xe 3.1.4sCisco Ios Xe 3.10.3sCisco Ios Xe 3.10.4sCisco Ios Xe 3.11.1sCisco Ios Xe 3.11.2sCisco Ios Xe 3.11.3sCisco Ios Xe 3.12.3sCisco Ios Xe 3.12.4sCisco Ios Xe 3.13.3sCisco Ios Xe 3.13.4sCisco Ios Xe 3.15.0sCisco Ios Xe 3.15.1sCisco Ios Xe 3.16.1sCisco Ios Xe 3.16.1asCisco Ios Xe 3.17sCisco Ios Xe 3.1sCisco Ios Xe 3.2.1seCisco Ios Xe 3.2.1sgCisco Ios Xe 3.2.4sgCisco Ios Xe 3.2.5sgCisco Ios Xe 3.2se
6.8
CVSSv3
CVE-2020-3209
A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical malicious user to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an improper check on the ...
Cisco Ios Xe 3.2.0seCisco Ios Xe 3.2.0sgCisco Ios Xe 3.2.1seCisco Ios Xe 3.2.1sgCisco Ios Xe 3.2.2seCisco Ios Xe 3.2.2sgCisco Ios Xe 3.2.3seCisco Ios Xe 3.2.3sgCisco Ios Xe 3.2.4sgCisco Ios Xe 3.2.5sgCisco Ios Xe 3.2.6sgCisco Ios Xe 3.2.7sgCisco Ios Xe 3.2.8sgCisco Ios Xe 3.2.9sgCisco Ios Xe 3.2.10sgCisco Ios Xe 3.2.11sgCisco Ios Xe 3.3.0seCisco Ios Xe 3.3.0sgCisco Ios Xe 3.3.0sqCisco Ios Xe 3.3.0xoCisco Ios Xe 3.3.1seCisco Ios Xe 3.3.1sg
6.8
CVSSv3
CVE-2021-1398
A vulnerability in the boot logic of Cisco IOS XE Software could allow an authenticated, local attacker with level 15 privileges or an unauthenticated attacker with physical access to execute arbitrary code on the underlying Linux operating system of an affected device. This vuln...
Cisco Ios Xe 3.13.2sCisco Ios Xe 3.10.6sCisco Ios Xe 3.13.6sCisco Ios Xe 3.14.4sCisco Ios Xe 3.7.2tsCisco Ios Xe 3.15.1csCisco Ios Xe 3.13.4sCisco Ios Xe 16.2.1Cisco Ios Xe 16.1.3Cisco Ios Xe 3.13.0sCisco Ios Xe 3.18.2sCisco Ios Xe 16.1.2Cisco Ios Xe 3.8.0sCisco Ios Xe 3.17.3sCisco Ios Xe 3.16.0sCisco Ios Xe 3.8.1sCisco Ios Xe 3.14.1sCisco Ios Xe 3.7.1sCisco Ios Xe 3.12.2sCisco Ios Xe 3.16.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.8s
7.5
CVSSv3
CVE-2016-1384
The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 up to and including 3.17 allows remote malicious users to modify the system time via crafted packets, aka Bug ID CSCux46898.
Cisco Ios 15.5\\(1\\)s4Cisco Ios 15.5\\(3\\)snCisco Ios 15.5\\(2\\)s2Cisco Ios 15.5\\(2\\)s1Cisco Ios 15.5\\(2\\)sCisco Ios 15.5\\(1\\)sCisco Ios 15.1\\(3\\)s1Cisco Ios 15.1\\(2\\)s2Cisco Ios 15.5\\(3\\)m0aCisco Ios 15.5\\(3\\)m1Cisco Ios 15.5\\(1\\)s1Cisco Ios 15.5\\(3\\)mCisco Ios 15.1\\(3\\)s2Cisco Ios 15.1\\(3\\)s0aCisco Ios 15.1\\(1\\)sCisco Ios 15.1\\(2\\)sCisco Ios 15.5\\(3\\)s1aCisco Ios 15.5\\(3\\)s1Cisco Ios 15.5\\(2\\)tCisco Ios 15.5\\(3\\)sCisco Ios 15.1\\(3\\)s5Cisco Ios 15.1\\(3\\)s3
6.8
CVSSv3
CVE-2022-20694
A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause the Border Gateway Protocol (BGP) process to crash, resulting in a denial of service (DoS) condit...
Cisco Ios Xe 3.13.2sCisco Ios Xe 3.10.6sCisco Ios Xe 3.13.6sCisco Ios Xe 3.14.4sCisco Ios Xe 3.7.2tsCisco Ios Xe 3.15.1csCisco Ios Xe 3.13.4sCisco Ios Xe 16.2.1Cisco Ios Xe 16.1.3Cisco Ios Xe 3.13.0sCisco Ios Xe 3.18.2sCisco Ios Xe 16.1.2Cisco Ios Xe 3.8.0sCisco Ios Xe 3.17.3sCisco Ios Xe 3.16.0sCisco Ios Xe 3.8.1sCisco Ios Xe 3.14.1sCisco Ios Xe 3.7.1sCisco Ios Xe 3.12.2sCisco Ios Xe 3.16.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.8s
7.5
CVSSv3
CVE-2021-1446
A vulnerability in the DNS application layer gateway (ALG) functionality used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause an affected device to reload. The vulnerability is due to a logic error that ...
Cisco Ios Xe 3.13.2sCisco Ios Xe 3.10.6sCisco Ios Xe 3.13.6sCisco Ios Xe 3.14.4sCisco Ios Xe 3.7.2tsCisco Ios Xe 3.15.1csCisco Ios Xe 3.13.4sCisco Ios Xe 16.2.1Cisco Ios Xe 16.1.3Cisco Ios Xe 3.13.0sCisco Ios Xe 3.18.2sCisco Ios Xe 16.1.2Cisco Ios Xe 3.8.0sCisco Ios Xe 3.17.3sCisco Ios Xe 3.16.0sCisco Ios Xe 3.8.1sCisco Ios Xe 3.14.1sCisco Ios Xe 3.7.1sCisco Ios Xe 3.12.2sCisco Ios Xe 3.16.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.8s
7.5
CVSSv3
CVE-2016-6386
Cisco IOS XE 3.1 up to and including 3.17 and 16.1 on 64-bit platforms allows remote malicious users to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets, aka Bug ID CSCux66005.
Cisco Ios Xe 3.9.0sCisco Ios Xe 3.12.4sCisco Ios Xe 3.6.2sCisco Ios Xe 3.4.2sCisco Ios Xe 3.7.4sCisco Ios Xe 3.7.2eCisco Ios Xe 3.12.1sCisco Ios Xe 3.16.1asCisco Ios Xe 3.3.5seCisco Ios Xe 3.10.5sCisco Ios Xe 3.2.1seCisco Ios Xe 3.9.0asCisco Ios Xe 3.3sg 3.3.2sgCisco Ios Xe 3.3xo 3.3.2xoCisco Ios Xe 3.1.4asCisco Ios Xe 3.4.1sCisco Ios Xe 3.3.3seCisco Ios Xe 3.6.2eCisco Ios Xe 3.13.4sCisco Ios Xe 3.7.5sCisco Ios Xe 3.1.0sCisco Ios Xe 3.3sg 3.3.1sg
7.5
CVSSv3
CVE-2016-6378
Cisco IOS XE 3.1 up to and including 3.17 and 16.1 up to and including 16.2 allows remote malicious users to cause a denial of service (device reload) via crafted ICMP packets that require NAT, aka Bug ID CSCuw85853.
Cisco Ios Xe 3.3.1sCisco Ios Xe 3.7.4asCisco Ios Xe 3.15.0sCisco Ios Xe 3.11.4sCisco Ios Xe 3.14.2sCisco Ios Xe 3.16.0sCisco Ios Xe 3.13.4sCisco Ios Xe 3.4.2sCisco Ios Xe 3.6.1sCisco Ios Xe 3.7.5sCisco Ios Xe 3.12.1sCisco Ios Xe 3.7.2tsCisco Ios Xe 3.16.1asCisco Ios Xe 3.8.1sCisco Ios Xe 3.10.5sCisco Ios Xe 3.5.0sCisco Ios Xe 3.1.4sCisco Ios Xe 3.9.0asCisco Ios Xe 3.14.3sCisco Ios Xe 3.9.1asCisco Ios Xe 3.4.6sCisco Ios Xe 3.10.4s
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook