Skip to content
OpenAdvisories

Product · Cisco

Cisco IOS XE Software

248 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

248 results · Feed

  • Unscored —
    CVE-2018-0476 EPSS 14%

    Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability

    A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due…

    Cisco Cisco IOS XE Software iOS Network devices
  • Unscored —
    CVE-2018-15372

    Cisco IOS XE Software MACsec MKA Using EAP-TLS Authentication Bypass Vulnerability

    A vulnerability in the MACsec Key Agreement (MKA) using Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to bypass authentication and pass traffic th…

    Cisco Cisco IOS XE Software iOS Network devices
  • Unscored —
    CVE-2018-15371

    Cisco IOS XE Software Shell Access Authentication Bypass Vulnerability

    A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the aff…

    Cisco Cisco IOS XE Software iOS Network devices
  • Unscored —
    CVE-2018-15374

    Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability

    A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install a malicious software image or file on an affected device. The vulnerability is due to the affected software improperly verifying…

    Cisco Cisco IOS XE Software iOS Network devices
  • Unscored —
    CVE-2018-15368

    Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability

    A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is …

    Cisco Cisco IOS XE Software iOS Network devices
  • High 8.8
    CVE-2017-6738 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco Cisco IOS XE Software IOS iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6742 Exploited Public exploit EPSS 21%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IntelliShield Cisco IOS XE Software Universal Product iOS Network devices
    KEV Apr 19, 2023
  • High 8.8
    CVE-2017-6741

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IntelliShield Cisco IOS XE Software Universal Product iOS Network devices