Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ios_xe vulnerabilities and exploits

(subscribe to this query)
7.4
CVSSv3
CVE-2021-34767
A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent malicious user to cause a Layer 2 (L2) loop in a configured VLAN, resulting in a denial of service ...
Cisco Ios XeCisco Ios Xe 3.15.1xbsCisco Ios Xe 3.15.2xbsCisco Ios Xe 16.7.1Cisco Ios Xe 16.7.1aCisco Ios Xe 16.7.1bCisco Ios Xe 16.7.2Cisco Ios Xe 16.7.3Cisco Ios Xe 16.7.4Cisco Ios Xe 16.8.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1bCisco Ios Xe 16.8.1cCisco Ios Xe 16.8.1dCisco Ios Xe 16.8.1eCisco Ios Xe 16.8.1sCisco Ios Xe 16.8.2Cisco Ios Xe 16.8.3Cisco Ios Xe 16.9.1Cisco Ios Xe 16.9.1aCisco Ios Xe 16.9.1bCisco Ios Xe 16.9.1c
7.5
CVSSv3
CVE-2017-3859
A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote malicious user to cause an affected device to reload. The vulnerability is due to a format string vulnerability whe...
Cisco Ios Xe 3.14.3sCisco Ios Xe 3.15.2sCisco Ios Xe 3.16.0csCisco Ios Xe 3.18.0spCisco Ios Xe 3.18.0sCisco Ios Xe 3.18.3vsCisco Ios Xe 3.18.1bspCisco Ios Xe 3.13.6asCisco Ios Xe 3.18.1cspCisco Ios Xe 3.13.5asCisco Ios Xe 3.16.1asCisco Ios Xe 3.17.1asCisco Ios Xe 3.18.0asCisco Ios Xe 3.13.5sCisco Ios Xe 3.15.3sCisco Ios Xe 3.18.1sCisco Ios Xe 3.16.2bsCisco Ios Xe 3.18.2sCisco Ios Xe 3.17.2sCisco Ios Xe 3.13.4sCisco Ios Xe 3.16.2asCisco Ios Xe 3.17.1s
NA
CVE-2015-6271
Cisco IOS XE 2.1.0 up to and including 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote malicious users to cause a denial of service (Embedded Services Processor crash) via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008.
Cisco Ios Xe 2.2.3Cisco Ios Xe 2.3.0Cisco Ios Xe 2.4.3Cisco Ios Xe 2.5.0Cisco Ios Xe 2.1.0Cisco Ios Xe 2.3.0tCisco Ios Xe 2.3.1tCisco Ios Xe 2.2.1Cisco Ios Xe 2.2.2Cisco Ios Xe 2.4.1Cisco Ios Xe 2.4.2Cisco Ios Xe 2.1.1Cisco Ios Xe 2.1.2Cisco Ios Xe 2.1.3Cisco Ios Xe 2.3.2Cisco Ios Xe 2.4.0
7.7
CVSSv3
CVE-2020-3232
A vulnerability in the Simple Network Management Protocol (SNMP) implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote malicious user to cause the device to reload. The vulnerability is due to incorrect handli...
Cisco Ios Xe 3.16.0sCisco Ios Xe 3.16.1asCisco Ios Xe 3.16.2asCisco Ios Xe 3.16.3asCisco Ios Xe 3.16.4bsCisco Ios Xe 3.16.4sCisco Ios Xe 3.16.5asCisco Ios Xe 3.16.5sCisco Ios Xe 3.16.6bsCisco Ios Xe 3.16.6sCisco Ios Xe 3.16.7bsCisco Ios Xe 3.16.7sCisco Ios Xe 3.16.8sCisco Ios Xe 3.16.9sCisco Ios Xe 3.16.10sCisco Ios Xe 3.17.0sCisco Ios Xe 3.17.1sCisco Ios Xe 3.17.2sCisco Ios Xe 3.17.3sCisco Ios Xe 3.17.4sCisco Ios Xe 3.18.0sCisco Ios Xe 3.18.0sp
NA
CVE-2015-6272
Cisco IOS XE 2.1.0 up to and including 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote malicious users to cause a denial of service (Embedded Services Processor crash) via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, an...
Cisco Ios Xe 2.2.2Cisco Ios Xe 2.2.3Cisco Ios Xe 2.1.0Cisco Ios Xe 2.3.0Cisco Ios Xe 2.1.3Cisco Ios Xe 2.2.1Cisco Ios Xe 2.1.1Cisco Ios Xe 2.1.2
8.6
CVSSv3
CVE-2023-20027
A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to imprope...
Cisco Ios Xe 3.9.0asCisco Ios Xe 3.9.1sCisco Ios Xe 3.9.2sCisco Ios Xe 3.10.0sCisco Ios Xe 3.10.1sCisco Ios Xe 3.10.2asCisco Ios Xe 3.10.2sCisco Ios Xe 3.10.2tsCisco Ios Xe 3.10.3sCisco Ios Xe 3.10.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.6sCisco Ios Xe 3.10.7sCisco Ios Xe 3.10.8asCisco Ios Xe 3.10.8sCisco Ios Xe 3.10.9sCisco Ios Xe 3.10.10sCisco Ios Xe 3.11.0sCisco Ios Xe 3.11.1sCisco Ios Xe 3.11.2sCisco Ios Xe 3.11.3sCisco Ios Xe 3.11.4s
7.5
CVSSv3
CVE-2023-20227
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain L2TP packe...
Cisco Ios Xe 16.8.1Cisco Ios Xe 16.8.1aCisco Ios Xe 16.8.1bCisco Ios Xe 16.8.1cCisco Ios Xe 16.8.1dCisco Ios Xe 16.8.1eCisco Ios Xe 16.8.1sCisco Ios Xe 16.8.2Cisco Ios Xe 16.8.3Cisco Ios Xe 16.9.1Cisco Ios Xe 16.9.1aCisco Ios Xe 16.9.1bCisco Ios Xe 16.9.1sCisco Ios Xe 16.9.2Cisco Ios Xe 16.9.3Cisco Ios Xe 16.9.4Cisco Ios Xe 16.9.5Cisco Ios Xe 16.9.5fCisco Ios Xe 16.9.6Cisco Ios Xe 16.9.7Cisco Ios Xe 16.9.8Cisco Ios Xe 16.10.1
6.7
CVSSv3
CVE-2021-1441
A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integrated Services Routers and Cisco ESR6300 Embedded Series Routers could allow an authenticated, local malicious user to execute unsigned code at system boot time....
Cisco Ios Xe 3.15.1xbsCisco Ios Xe 3.15.2xbsCisco Ios Xe 16.9.1Cisco Ios Xe 16.9.1cCisco Ios Xe 16.10.1Cisco Ios Xe 16.10.1eCisco Ios Xe 16.11.1Cisco Ios Xe 16.11.1cCisco Ios Xe 16.11.1sCisco Ios Xe 16.12.1Cisco Ios Xe 16.12.1cCisco Ios Xe 16.12.1sCisco Ios Xe 16.12.1zaCisco Ios Xe 16.12.2Cisco Ios Xe 16.12.2sCisco Ios Xe 16.12.2tCisco Ios Xe 16.12.3Cisco Ios Xe 16.12.3sCisco Ios Xe 16.12.4Cisco Ios Xe 17.1.1Cisco Ios Xe 17.1.1sCisco Ios Xe 17.1.1t
7.5
CVSSv3
CVE-2023-20187
A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote malicious user to cause the affected device to reload, resulting in a denial of service ...
Cisco Ios Xe 3.7.1sCisco Ios Xe 3.7.2sCisco Ios Xe 3.7.2tsCisco Ios Xe 3.7.3sCisco Ios Xe 3.7.4sCisco Ios Xe 3.7.5sCisco Ios Xe 3.7.6sCisco Ios Xe 3.7.7sCisco Ios Xe 3.8.0sCisco Ios Xe 3.8.1sCisco Ios Xe 3.8.2sCisco Ios Xe 3.9.0sCisco Ios Xe 3.9.1sCisco Ios Xe 3.9.2sCisco Ios Xe 3.10.0sCisco Ios Xe 3.10.1sCisco Ios Xe 3.10.1xbsCisco Ios Xe 3.10.2sCisco Ios Xe 3.10.3sCisco Ios Xe 3.10.4sCisco Ios Xe 3.10.5sCisco Ios Xe 3.10.6s
NA
CVE-2015-6273
Cisco IOS XE prior to 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly (VFR) by certain firewall and NAT components, which allows remote malicious users to cause a denial of service (Embedded Services Processor crash) via crafted IP packets...
Cisco Ios Xe 3.1.0sCisco Ios Xe 2.2.1Cisco Ios Xe 3.1.1sCisco Ios Xe 2.2.3Cisco Ios Xe 2.2.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook